Consumers get no README or license, making integration and reuse less transparent. The repository is not archived, but it has no recent activity or meaningful community traction.
12%
Total Score
33
Packagist marks the entire package as abandoned, with no replacement named. This is a direct warning against taking a new dependency on the release.
The latest release was in May 2018, with no releases in the last 12 months despite the package being more than nine years old. This indicates prolonged abandonment risk.
No declared license, license file, or repository license file was found. That creates a material legal and transparency concern for dependency use.
The package has no README, which makes a consumer-facing integration package harder to adopt. Missing tests and changelog files are normal for published artifacts and do not add concern here.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no community signal to offset the package's age and abandonment status.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
gmedia/coresite Version ~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.