The README, matching repository, and clean install behavior make the package understandable to adopt. Its single-maintainer project has had no commits or releases for nearly five years, and the release has no license or security policy.
52%
Total Score
50
72
88
No registry declaration, license file, or repository license file was detected, leaving the legal terms for using this dependency unclear.
One registry maintainer is consistent with a small user-owned project, but it provides limited apparent continuity if that maintainer stops maintaining it.
The package has had no releases in the last 12 months, with the latest release on October 28, 2021; its earlier seven-release history shows initial activity but not ongoing maintenance.
There were zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive since October 2021.
The repository has zero stars and forks and only one watcher, providing little evidence of a broader community that could help sustain it.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
gabordemooij/redbean Version dev-master | — | — |
wp-cli/php-cli-tools Version ^0.11.13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.