The package is small and clearly structured, with a license, README, changelog, and no install scripts. Its organization backing and matching repository help, but four years without releases or commits makes abandonment a serious concern.
45%
Total Score
50
100
75
88
The latest release was on September 19, 2022, and there have been no releases in the last four years. Three releases over the initial 4 months show an early release pattern but no current maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the last release. This is strong evidence of inactive maintenance.
The repository has no stars or forks and only four watchers. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of broad community adoption.
Composer is used for the build, but no security scanning tools are present. The missing scanning is a hygiene gap, while the observed inactivity remains the more important concern.
The repository has no security policy. This reduces transparency for reporting vulnerabilities, although it is secondary to the lack of maintenance activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tmw/fpdm Version ^2.9 | — | — |
form-relay/core Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.