The project has gone quiet since its August 2025 release, with no recent commits or releases. Clear licensing, release notes, a matching README, and no install scripts provide useful safeguards, but maintenance capacity looks limited.
62%
Total Score
50
88
75
The package has 38 releases over about nine years, but none in the last 12 months despite a typical historical interval of about 57 days; this indicates a meaningful slowdown.
There were no commits and no active maintainers in the last three months, which is a concrete sign of currently limited maintenance activity.
Composer is used for the build, but no security scanning tool was detected; this is a modest transparency and maintenance concern rather than evidence of an unsafe release.
The repository has no security policy, leaving vulnerability-reporting expectations and handling procedures undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
neos/neos Version ^8.3 || ^9.0 | — | — |
carbon/eel Version ^2.19 | — | — |
carbon/notification Version ^2.0 || ^3.0 | — | — |
carbon/includeassets Version ^5.5 || ^6.0 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.