It includes tests, a README, and a changelog, and its repository matches the package. The declared MIT license does not match LGPL-2.1 text found in bundled files, so verify licensing before adoption.
58%
Total Score
33
100
79
83
There were zero commits and zero active maintainers in the last three months; together with no releases in the last year, this is meaningful abandonment risk.
The manifest declares MIT and license files are present, but detected LGPL-2.1 text in bundled files does not match that declaration; the mismatch warrants licensing review.
The registry namespace and repository owner match, but the owner is recorded as an individual account rather than an organization, offering limited evidence of broader project backing.
The package has had no releases in the last 12 months, despite nine releases overall; this points to slowing maintenance rather than immediate unfitness.
There are no open issues or pull requests, but there is also no recent issue or pull-request activity, so this provides little evidence of active maintenance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
cakephp/cakephp Version ^5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.