The artifact lacks a README, and the linked repository does not match the package name. Its declared MIT license also conflicts with detected BSD-2-Clause, MIT, and MPL-2.0 text.
32%
Total Score
0
38
50
This package has only one release, published about 8 years and 9 months ago, with no releases in the last 12 months. That strongly indicates the package is no longer maintained.
The repository recorded no commits and no active maintainers in the last 3 months, consistent with the long release gap and a high abandonment risk.
The package declares MIT and includes a license file, so it is not unlicensed. However, the detected license text includes BSD-2-Clause and MPL-2.0 as well, creating a licensing mismatch that needs clarification.
The published artifact has no README, which reduces consumer guidance for a PHP library. The absence of tests and a changelog is not a concern here because those normally belong in the source repository rather than the package artifact.
The linked repository is named new_pakage rather than evalue/crud, and no README package mention was collected. This raises concern that the repository may not clearly belong to the package.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.