The project has a clear license, useful documentation, and an organization-owned repository with a recent push. Maintenance evidence is thin: only two releases, no releases in the last 12 months, and no recorded commits or active maintainers in the last three months; security tooling is also absent.
62%
Total Score
67
100
83
83
The package has only two releases over about two years, with no release in the last 12 months and a median interval of about 432 days. This is meaningful maintenance caution, although the repository was pushed recently.
There were zero commits and zero active maintainers recorded in the last three months. This is the strongest maintenance concern, though the recent repository push partially offsets the abandonment signal.
One open issue and one open pull request remain, with no issues or pull requests opened or merged in the last month. This is a modest sign of limited project activity rather than a severe problem.
Seven stars and three forks indicate a small user and contributor footprint. Popularity is only supporting evidence, but the limited reach offers little independent confidence in long-term maintenance.
Composer is used for builds, but no security scanning tools are configured. The missing scanning is a hygiene gap, not evidence that the release is unsafe.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
ifera-mc/update-notifier Version dev-master | — | — |
pocketmine/pocketmine-mp Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.