a sample project of Ethnam
34%
Total Score
unhealthy
Risky: no release or commit activity since June 2015 leaves this project effectively abandoned.
The package has made no releases in over 11 years, with all five releases concentrated in May and June 2015. This is strong evidence of abandonment for a package intended to remain a maintained dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push being over 11 years ago. No provided maintenance signal compensates for this lack of recent activity.
A post-install-cmd script runs during installation, creating additional supply-chain and reproducibility exposure. The signal does not show what the script does, so this warrants caution rather than a severe finding.
The package contains only seven files, including a README, Composer manifests, a Makefile, and CI configuration. This is consistent with a small build-project package, but provides little evidence of mature implementation or maintenance.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these very low adoption signals provide no additional confidence in ongoing maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ethnam/ethnam Version dev-master | — | — |
smarty/smarty Version 2.* | — | — |
ethnam/generator Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.