The three-file source tree and absent security policy provide little transparency. Stable versioning and no registry deprecation are positives, but do not offset the stale project.
38%
Total Score
25
72
75
This package has only one release, published in August 2021, with no releases in the last 12 months. That is strong evidence of abandonment risk for a dependency.
The repository recorded no commits and no active maintainers in the last three months, reinforcing that the project is no longer actively maintained.
The package and repository each contain only three files, including one source file, leaving little visible project structure or maintenance evidence.
The published artifact has no README, while tests and a changelog are normally repository concerns and are not expected in every package. The missing consumer-facing documentation is still a minor transparency gap.
The repository is owned by a personal user account rather than an organization, so the single registry maintainer offers limited visible institutional backing.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
landkit/php-functions Version ^1.0 | — | — |
rosell-dk/webp-convert Version ^2.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.