38%
Total Score
50
67
75
Only two releases were published, with the latest on November 30, 2018 and none in the following seven years; this is strong evidence of abandonment for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, confirming that maintenance has not resumed.
The artifact includes a short README, which helps consumers, but it has no tests or changelog. Missing tests are not inherently unusual for a typing bundle, while the README's stated TODOs reinforce its limited maturity.
Composer is used to build or manage the project, but no security-scanning tooling is present. This is a modest transparency and maintenance gap rather than a severe risk by itself.
The linked repository has no security policy, leaving no documented route for reporting vulnerabilities or coordinating fixes.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.