The repository remains present and organized, with tests, a changelog, and matching project ownership. Its long release gap and inactive recent commit record make future compatibility and maintenance less certain.
62%
Total Score
75
83
50
A post-autoload-dump script runs during installation. This is relevant operational behavior and deserves review, but the signal alone does not show harmful or unusually risky activity.
The latest release was published in June 2021, with no releases in the last 12 months and only seven releases over roughly 11 years. This materially raises abandonment and compatibility risk for a dependency.
There were no commits and no active maintainers in the last three months. Although the repository was pushed in January 2025, the lack of recent development weakens evidence of active maintenance.
The repository has no stars or forks and one watcher. Popularity is only supporting evidence, but these low levels provide little independent evidence of broad community review.
The project uses Make and Composer build tooling, but no security-scanning tools were detected. This is a modest transparency and maintenance gap, not a severe risk by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
icanboogie/icanboogie Version ^5.0 | — | — |
icanboogie/activerecord Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.