The package includes tests, a usable README, and an MIT declaration. Its only release was in 2019, with no recent commits and no security policy, so long-term maintenance is a significant concern.
39%
Total Score
50
100
72
83
The package has only one release, published in June 2019, and none in the last 12 months. This is strong evidence of abandonment risk for a dependency that may need compatibility or security maintenance.
There were zero commits and zero active maintainers in the last three months. Combined with the single-release history, this indicates a substantial abandonment risk.
The repository has zero stars, forks, and watchers. Popularity is not decisive by itself, but alongside the lack of recent releases and commits it provides no supporting evidence of ongoing community use.
Composer build tooling is present, but no security-scanning tools were detected. This is a moderate transparency and maintenance gap, though it is less important than the observed inactivity.
The linked repository is not archived, so it remains technically available. Its last push was in June 2019, which is consistent with the maintenance concern shown by repo_commit_activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1 | — | — |
queue-interop/queue-interop Version ^0.8 | — | — |
timo-reymann/gitlab-webhook-lib Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.