ewma data field control
38%
Total Score
0
100
38
75
Only two releases were published, with the latest in May 2019 and none in the past seven years; this is strong evidence of abandonment risk.
The repository recorded no commits or active maintainers in the past three months, consistent with the package's long release gap and limited maintenance capacity.
Neither the package nor the linked repository declares or includes a recognized license, so developers lack clear permission to use and redistribute it.
The artifact has no README, which is a meaningful transparency gap for a package consumers must integrate; absent tests and changelog files are normal packaging practice and do not lower the score.
Composer is used for the build, which fits the package ecosystem, but no security scanning tooling is present; this is a modest transparency and maintenance gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
fed/ewma-module-installer-plugin Version ~0.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.