The package is licensed, matches its source repository, and has no install-time scripts. Its four runtime dependencies are visible, but this legacy release should be pinned exactly rather than treated as actively maintained.
38%
Total Score
50
50
63
83
Only two releases were published, with the latest about 10 years ago and none in the last 12 months. This strongly indicates abandonment risk for a dependency.
There were zero commits and zero active maintainers in the last three months, consistent with the repository's last push being about 10 years ago. This is strong evidence of abandonment risk.
Four runtime dependencies are explicitly declared, including related Flashtag packages and Symfony Filesystem. The profile is understandable, though each dependency adds maintenance surface to an otherwise inactive package.
The registry lists one maintainer, while project backing identifies an organization-owned repository. That backing makes the short registry list less concerning, but the small apparent publishing base still limits resilience.
There were no new issues or pull requests in the last month and no merged pull requests. This is consistent with an inactive project, although some issue counts are unknown.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flashtag/core Version *@dev | — | — |
flashtag/data Version *@dev | — | — |
symfony/filesystem Version ^3.0 | — | — |
flashtag-themes/clean-creative Version *@dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.