Unfit to use: Packagist marks the package abandoned and its source repository is archived. The last release was over four years ago, with no releases in the past year, so maintenance and compatibility risks are substantial.
15%
Total Score
0
50
83
Packagist marks the entire package as abandoned, with no replacement package specified. This is a severe adoption risk because the registry itself indicates the package is no longer supported.
The package has 46 releases since July 2015, but its latest release was in April 2022 and there have been no releases in the last 12 months. This long release gap materially increases the risk of outdated behavior and unaddressed issues.
The repository recorded zero commits and zero active maintainers during the last three months. Combined with the archived repository and abandoned registry status, this confirms that maintenance has stopped rather than merely slowed.
The linked repository is archived, despite having been pushed in May 2024. An archived source repository is a strong indication that future fixes and maintenance should not be expected.
The repository uses Make and Composer build tooling, but no security-scanning tools were detected. This is a transparency gap, though it is outweighed by the more direct abandonment evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
gpupo/common Version ^5.6 || ^6.0 || dev-main | — | — |
gpupo/common-sdk Version ^6.4 || dev-main | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.