The package has a clear MIT license and a very small source tree, which limits its maintenance surface. However, it has had no release or commit activity since May 2018, and the linked repository does not identify the package clearly; avoid making it a new dependency.
38%
Total Score
0
100
67
67
The latest release was published in May 2018, and there have been no releases in more than eight years. This is strong evidence of abandonment for a dependency, despite the package not being formally deprecated.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the last push in May 2018, this indicates prolonged maintenance inactivity.
The package contains only four files, including a Composer manifest and one source file. The small tree may reflect a narrow utility, but it provides little visible documentation or project evidence.
The artifact has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the absent README reduces consumer transparency for this library package.
The repository name does not match the package name, and no README package mention was available. This makes it unclear whether the linked repository is the intended source for this package.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
jsnlib/ao Version >=1.2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.