The small user base and single registry maintainer leave little evidence of ongoing support. The package is licensed and documented, but its maintenance record makes continued compatibility uncertain.
32%
Total Score
25
79
50
Only two releases were published, both in April 2015, with no releases in the last 11 years. This is strong evidence of abandonment risk despite the package not being deprecated.
The repository recorded no commits and no active maintainers in the past 3 months, consistent with the long release gap and indicating no visible ongoing maintenance.
One registry maintainer is responsible for publishing the package. Because the repository owner is an individual rather than an organization, there is limited visible maintainer redundancy.
The repository has 1 star, 0 forks, and 1 watcher, providing very little supporting evidence of community use or review.
The linked repository has no security policy, leaving no documented route for reporting vulnerabilities or handling security fixes. This adds a transparency gap alongside the maintenance concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
kpacha/config Version ~0.1 | — | — |
sensiolabs/consul-php-sdk Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.