The stable version and lack of install scripts reduce adoption risk, but the four-file artifact has no README and the license metadata conflicts with the bundled MIT file. The long-dormant release line makes future fixes uncertain.
38%
Total Score
60
75
Only three releases were published, all within August 2016, and there have been no releases in roughly 10 years. This is strong evidence of abandonment risk despite the package not being deprecated.
The manifest declares the package proprietary, while the bundled LICENSE file is recognized as MIT. The file provides a usable license, but the mismatch creates avoidable legal and provenance uncertainty.
The complete artifact contains only four files, including two headers and composer.json. This is consistent with a small plugin but provides little visible context for integration or maintenance.
The artifact has no README, which is a meaningful consumer-facing gap for a library. Missing tests and changelog are normal for published artifacts and do not add concern here.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
intaglio/nuclio-core Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.