The README gives concrete Composer and usage instructions, and the repository matches the package under organization backing. Eight runtime dependencies and no security scanning add modest maintenance exposure.
55%
Total Score
75
50
81
75
The package declares eight runtime dependencies and no development dependencies. This is a moderate dependency surface for a small package and increases exposure to changes in its dependency chain.
Neither the package nor the linked repository declares or contains a recognized license file. That creates a real adoption and redistribution concern.
The package has 43 releases and a median interval of about 25 days, but it has had no release in nearly five years and none in the last 12 months. This indicates a mature but inactive release line.
The repository recorded no commits and no active maintainers in the last three months, following a last push more than four years ago. The repository is not archived, but current maintenance capacity is unclear.
The repository has 0 stars and 0 forks, with 2 watchers. Popularity is only supporting evidence, but this provides little external evidence of broad adoption or community resilience.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
infrajs/mail Version ~1 | — | — |
infrajs/view Version ~1 | — | — |
infrajs/popup Version ~1 | — | — |
akiyatkin/form Version ~1 | — | — |
akiyatkin/goal Version ~1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.