The stable major version and matching organization repository provide useful continuity, while the README and low dependency count help consumers. However, the release has been unchanged since September 2021 and provides no license declaration or license file, making long-term maintenance and legal reuse concerns significant.
43%
Total Score
50
100
67
83
The release has no declared license, no detected license, and no license file in either the package or repository. This is a material transparency and legal-use concern with no compensating license evidence.
The package has 21 releases since March 2016, but the latest release was in September 2021 and there were no releases in the last 12 months. This indicates several years of release inactivity.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's multi-year release gap. Organization backing is present, but no recent activity shows current maintenance capacity.
The repository has zero stars and forks and one watcher, indicating little public adoption or review. Popularity is only supporting evidence, so this reinforces rather than determines the maintenance concern.
Composer is used as a build tool, but no security scanning tools are present. The missing scanning is a modest hygiene gap, while the package's stronger concerns are its age and absent license.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
infrajs/ans Version ~1 | — | — |
infrajs/each Version ~1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.