The package is clearly documented, licensed, and narrowly scoped, with a matching repository and a release note for this version. Its lone registry maintainer, absent recent commit activity, and missing security policy leave maintenance and oversight concerns.
58%
Total Score
50
100
81
75
Only one account has registry publishing access, which provides limited publishing redundancy; the matching personal repository offers some compensating ownership context but not a broader maintainer base.
The registry namespace and repository owner match, but the owner is an individual rather than an organization, so there is no evidence of institutional backing.
The package has 25 releases since April 2015, but none in the last 12 months and its latest release was in December 2020, indicating prolonged release inactivity.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the release-history evidence of stalled maintenance.
Composer is used as the build tool, but no security scanning tools are present, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
codeigniter/framework Version 3.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.