The package includes tests, a Composer build, and an MIT declaration, which provide some useful baseline hygiene. Its tiny footprint and organization backing do not offset the lack of activity for over five years or the absence of a README and security policy.
40%
Total Score
50
100
63
67
The package has had only two releases, both on June 17, 2021, with no release in over five years. This is strong evidence of abandonment for a dependency expected to receive maintenance.
There were zero commits and zero active maintainers in the last three months, while the repository was last pushed over five years ago. This materially increases abandonment risk.
The artifact contains source code, Composer metadata, workflow configuration, and tests, showing a real package structure. The absence of a README remains a documentation gap for users integrating the package.
The source has tests and this version has a GitHub release, which are positive signs. However, the package has no README, reducing consumer transparency for a library package.
The repository has zero stars and forks and only one watcher. Popularity is not decisive, but these values provide little supporting evidence of community adoption or review.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
jalno/lumen Version 0.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.