18%
Total Score
critical
Unfit to use: the package is deprecated and has had no release since February 2019.
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption risk because the release is explicitly withdrawn from active maintenance.
The package has only one release, published in February 2019, with no releases in the last 12 months. That long period without a new release strongly indicates abandonment.
No license is declared, no license file is present in the package, and no repository license file was detected. This leaves the legal terms for using the dependency unclear.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no evidence of a broader user or maintainer community.
Composer is used for builds, which is appropriate for this package, but no security scanning tooling is present. That is a minor transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
neos/flow Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.