The package is small and focused, with a clear README, changelog, and release notes for this version. Its maintenance record is effectively dormant, and the repository has no security policy, leaving long-term support uncertain.
43%
Total Score
0
86
75
This is a single-release package, and its only release was about 7 years ago with no releases in the past 12 months. That strongly raises abandonment risk.
The repository recorded no commits and no active maintainers in the past 3 months, consistent with the roughly 7-year release gap. The package is not archived, but current maintenance is not evident.
The linked repository has no security policy. For a package that has received no maintenance for years, this is a meaningful transparency and response gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ~1.0 | — | — |
npm-asset/codemirror Version ^5.43 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.