It includes a README, release notes, a stable version, and no install-time scripts. Those positives do not offset the package's prolonged inactivity and withdrawn status.
12%
Total Score
50
100
61
100
Packagist marks the entire package as abandoned, with no replacement provided. This directly signals that maintainers no longer recommend depending on it.
The package has had no release in more than 7 years; its latest release was published in March 2019. This strongly indicates that current fixes and compatibility work are unlikely.
There were zero commits and zero active maintainers in the measured 3-month period, consistent with the repository's long-term inactivity. No provided maintenance signal compensates for this.
The linked repository is archived, and its last push was in April 2019. An archived source project is a severe abandonment risk for a dependency.
There was no new or closed issue or pull-request activity in the measured month, while one issue and one pull request remain open. This adds evidence of an inactive project.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hoa/socket Version ~1.0 | — | — |
hoa/exception Version ~1.0 | — | — |
hoa/consistency Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.