Risky to adopt: this package has had no release or repository activity since March 2020. Its focused file tree, valid BSD-3-Clause licensing, and non-deprecated status help, but the long-standing inactivity makes maintenance and compatibility uncertain.
42%
Total Score
0
100
64
75
Only one release exists, published in March 2020, with no releases in the last 12 months. This is strong evidence of abandonment risk for a package developers may need to keep compatible over time.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since March 2020. No provided signal compensates for this prolonged inactivity.
The package has no README, tests, or changelog, while its GitHub release exists without release notes. The absence of tests and changelog is normal for published artifacts, but the missing README reduces consumer transparency for this integration package.
Composer is used as a build tool, showing basic ecosystem-appropriate project tooling, but no security scanning tools are configured. The tooling is adequate for the small package while offering limited additional assurance.
The repository is not archived, which leaves the project technically maintainable, but its last push was in March 2020. The unarchived status does not offset the observed lack of recent work.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
oneplace/oneplace-worktime Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.