The stable version, changelog, and release notes provide useful history, while the package has no tests or README for consumers. Its maintenance signals are decisive, so pinning this release would leave the project dependent on abandoned software.
8%
Total Score
25
30
50
Packagist marks the entire package as abandoned, with no replacement specified. Package-level deprecation is a severe warning for a new dependency.
The package has had no releases in over nine years despite a 12-release history, showing prolonged abandonment rather than a brief pause.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the archived project and lack of current maintenance.
The linked repository is archived and was last pushed on January 16, 2017, so it is no longer an actively maintained source.
A changelog and release notes for this exact version provide useful documentation, but the package has no README and no tests, which weakens consumer guidance and verification for a library.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hoa/xml Version ~1.0 | — | — |
hoa/file Version ~1.0 | — | — |
hoa/http Version ~1.0 | — | — |
hoa/view Version ~3.0 | — | — |
hoa/event Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.