The MIT license and restrained dependencies make the package straightforward to evaluate. Its last release was over five years ago, and the registry could not verify its maintenance source; pinning this version carries substantial abandonment risk.
40%
Total Score
100
70
100
The package has only three releases, with the latest on August 27, 2020 and no releases in the last 12 months. This long period without a release materially increases abandonment risk.
The assessed version is 9.5.1, while the collected registry profile reports 1.0.1 as the latest version. Although the profile describes a stable major line, the version mismatch reduces confidence in the release history and provenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^8.7.1 || ^9.5.0 | — | — |
symfony/filesystem Version ^3.0 || ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.