It has a clear MIT license, a matching repository, and no install-time scripts or deprecation notice. The small project lacks security scanning and a security policy, so future maintenance and review capacity are limited.
58%
Total Score
75
71
75
Only two releases have been published, with no release in nearly six years and no releases in the last 12 months. This indicates a potentially abandoned package, though the stable release history does not show frequent churn.
The repository has had zero commits and zero active maintainers in the last three months, consistent with the long release gap. That materially raises maintenance and abandonment risk.
The repository has zero stars and forks and one watcher, offering little community evidence to offset the inactive maintenance record. Popularity is supporting evidence only, so this is a secondary concern.
Composer build tooling is present, but no security scanning tools were detected. For a dependency package, that is a modest transparency and maintenance weakness.
The repository has no security policy. This leaves vulnerability-reporting expectations unclear, although the absence is a hygiene concern rather than evidence of an active vulnerability.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
gipfl/protocol Version >=0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.