It has a clear README, MIT licensing, tests in the repository, and a release note for this version. Its long-standing lack of releases and development activity makes future fixes and compatibility uncertain.
42%
Total Score
0
100
72
83
The package has had only one release, published over seven years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk despite the package remaining available.
There were zero commits and zero active maintainers in the last three months, following a last repository push in November 2020. This materially increases the risk that defects and compatibility issues will remain unresolved.
The repository has zero stars and forks and one watcher. Low popularity is only supporting evidence, but it offers little external adoption or review signal to compensate for the stale project.
Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and hygiene gap, secondary to the much larger maintenance concern.
The linked repository is not archived, which leaves open the possibility of future maintenance. Its last push was in November 2020, so the unarchived status does not offset the prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/plates Version v4.0.0-alpha | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.