The tiny project has had no new release or commit activity since September 2018, leaving compatibility and maintenance uncertain. Its name also borrows the identity of the much more established laravel/pao package. The MIT license, matching repository, and simple dependency profile are positives.
34%
Total Score
63
100
61
83
The package borrows the identity of laravel/pao, which has about 4.8 million monthly downloads and 22 stable releases, while this package has 7 monthly downloads and one release. Consumers most likely wanted the established laravel/pao package, making this a severe adoption risk.
This package has only one release, published more than 8 years ago, with no releases in the last 12 months. That leaves compatibility and ongoing maintenance unverified.
There were zero commits and zero active maintainers in the last 3 months, consistent with a project that has been inactive for years.
There is one open issue and no recent issue or pull request activity, offering no evidence of active maintenance or responsive support.
The repository has only 4 stars and 2 forks. Popularity is supporting evidence rather than a verdict, but these numbers provide little evidence of a broad, active user or contributor base.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jxlwqq/code-mirror Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.