15%
Total Score
critical
Unfit to use: the package is deprecated and its source repository is archived.
Packagist marks the entire package as abandoned, with no replacement provided. This directly raises the risk of relying on it for maintained software.
The latest release was published in March 2017, and there have been no releases in the last 12 months despite the package being over 10 years old. This strongly indicates abandonment.
The repository recorded no commits and no active maintainers in the last 3 months, consistent with its archived state and long release gap.
The linked repository is archived and was last pushed in August 2017, indicating the project is no longer being maintained.
The artifact contains a license file and the repository also has one, but the manifest declares LGPLv3 while the detected file license is GPL-3.0. That mismatch warrants checking the intended licensing before adoption.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.