The source repository remains unarchived and includes tests, release notes, and a security policy. Recent commit activity is absent, and the workflow uses two unpinned actions, limiting confidence in ongoing upkeep.
18%
Total Score
75
79
75
Packagist marks the entire package as abandoned and explicitly names personnummer/personnummer as the replacement. This is a severe adoption risk even though the repository itself is not archived.
The package has 16 releases over more than 11 years, but none in the last 12 months; this supports the abandonment concern rather than offsetting it.
The repository recorded zero commits and zero active maintainers in the last three months. That weakens evidence of current maintenance capacity.
The single workflow was fully analyzed with no high-confidence findings, but both of its two action references are unpinned. This is a supply-chain hygiene gap, not a severe risk by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/clock Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.