The MIT license, matching repository, and simple dependency profile make the release straightforward to adopt. Its single maintainer, absent security policy, and long period without changes leave limited evidence that future fixes will arrive.
58%
Total Score
50
100
83
75
Only one registry maintainer account is listed, leaving a thin publishing base; the repository is user-owned rather than organization-backed.
The package has only 3 releases and none in the last 12 months; the latest release was over a year ago, which weakens evidence of active maintenance.
The repository had 0 commits and 0 active maintainers in the last 3 months, consistent with a long inactive period and increasing abandonment risk.
The repository has 0 stars, 2 forks, and 1 watcher, indicating limited adoption evidence; popularity is only supporting evidence and does not outweigh the maintenance signals.
Composer is used as a build tool, but no security scanning tooling was detected; this is a modest transparency and maintenance gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
automattic/jetpack-autoloader Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.