Its dependency set is small, but the package has little release history and limited transparency. The registry marks the package abandoned, so pinning it carries substantial maintenance risk.
15%
Total Score
100
33
Packagist marks the entire package as abandoned, with no replacement provided. Package-level deprecation is a severe reason not to adopt it.
Only two releases have been published, with none in the last 12 months; the latest release was about nine years ago. This is strong evidence of abandonment risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
mongodb/mongodb Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.