The repository was last updated over 11 years ago, and it has no security policy or security scanning. MIT licensing, tests, and a matching repository provide useful transparency, but not current maintenance.
40%
Total Score
67
75
The latest release was nearly 12 years ago, with no releases in the last 12 months and only three releases overall. This strongly indicates abandonment risk despite the package having a stable version.
Composer build tooling is present, but no security scanning tools were detected. That limits evidence of ongoing supply-chain and vulnerability hygiene.
The repository is not archived, which avoids an explicit abandonment marker, but its last push was over 11 years ago and does not offset the stale release history.
The repository has no security policy, leaving vulnerability reporting and response practices undocumented. This is a transparency gap, though it is less serious than the long maintenance lapse.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
getsky/phalcon-bootstrap Version >1.2.0 | — | — |
getsky/phalcon-config-loader Version >1.0.0 | — | — |
getsky/phalcon-autoload-services Version 1.1.x | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.