The compact source tree and Composer build setup are straightforward, while organization ownership provides some continuity. Consumers get little documentation and no security policy, and the linked repository does not clearly identify this package. Pinning this old release should be deliberate.
35%
Total Score
50
57
50
This package has only one release, published in April 2019, with no releases in roughly seven years. That is strong evidence of abandonment for a dependency receiving ongoing maintenance expectations.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring in April 2019. No newer activity is provided to offset the long inactivity.
Neither the package metadata nor the repository contains a recognized license declaration or license file. This creates a material adoption and redistribution concern.
The package contains no README, tests, or changelog, although a GitHub release exists for this version and the compact source tree may explain the missing test and changelog artifacts. The missing README remains a documentation gap for consumers.
The linked repository name does not match the package name, and the available README mention value is null. The repository may still be related, but package ownership is not clearly demonstrated.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
lispa/amos-core Version * | — | — |
bower-asset/gantt Version ~4.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.