Functions for doing original post discovery in PHP
56%
Total Score
caution
Usable with caveats: its only release was about 12 years ago and development has been inactive for about 10 years.
The package has had only one release, published about 12 years ago, with no releases in the last 12 months. That sharply limits evidence of ongoing maintenance, though the repository remains available and unarchived.
The repository recorded no commits and no active maintainers in the last three months, while its last push was about 10 years ago. This is a meaningful abandonment and compatibility risk for a dependency.
There are two open issues, but no new or closed issues and no pull-request activity in the last month. The small issue count is not severe, but the lack of recent activity reinforces the maintenance concern.
The repository uses Composer, matching the package ecosystem, but no security scanning tools were detected. This is a modest hygiene gap rather than a severe dependency risk.
No security policy was found in the repository. For a small, old library this is a transparency gap, although it is less significant than the inactive maintenance history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mf2/mf2 Version ~0.2 | — | — |
mf2/shim Version ~0.2 | — | — |
guzzle/guzzle Version * | — | — |
tantek/cassis Version * | — | — |
barnabywalters/mf-cleaner Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.