The small package footprint limits confidence in ongoing compatibility. Its license and dependency declaration are clear, but this release is best treated as legacy.
35%
Total Score
50
64
75
The package has had no release in more than 11 years, and none in the last 12 months; its five-release history indicates a long-abandoned release line.
There were zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release.
The repository name does not match the package name and its README does not mention the package, creating uncertainty that it is the intended source repository.
The repository has one star and no forks, providing little evidence of a broad user or contributor base; this supports but does not independently establish abandonment.
The repository is not archived, which avoids the strongest abandonment signal, but it was last pushed more than 11 years ago.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/symfony Version 2.* | — | — |
innova/angular-js-bundle Version ~5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.