The README and release notes make integration clearer, and the package has no install-time scripts or deprecation notice. Its small footprint, single maintainer, and missing security policy leave little evidence of ongoing oversight.
39%
Total Score
50
79
75
Neither the package metadata nor the linked repository contains a recognized license or license file, leaving the legal terms for dependency use unclear.
The package has one registry maintainer, and the repository is user-owned rather than organization-backed; this indicates a thin publishing and support base alongside the stale activity.
The latest release was published in January 2018, with no releases in the last 12 months; that is roughly eight years without a registry update and is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of current maintenance.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these counts provide no additional community or continuity signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jenssegers/agent Version ^2.5 | — | — |
jhorlima/wp-mocabonita Version >=3.3.0 | — | — |
jhorlima/parametrizacao Version >=1.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.