The README explains installation and usage, and the repository is tied to an organization with a matching package reference. Its small scope and limited recent activity leave less evidence of ongoing maintenance than a mature dependency would provide.
62%
Total Score
75
80
50
Neither the package nor the linked repository declares or contains a recognized license file. This creates a real adoption and redistribution concern.
The package has four releases across about five years, with a median interval of about 524 days and only one release in the last 12 months. The recent 1.0.4 release shows it is not entirely abandoned, but maintenance is infrequent.
The repository recorded no commits and no active maintainers in the last three months. The release on March 18, 2026 provides some evidence of recent work, but the current gap weakens confidence in ongoing maintenance.
The linked repository has no security policy. For a small package this is a transparency gap, though it is not evidence of a security incident by itself.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
neos/neos Version * | — | — |
neos/form-builder Version ^2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.