The last release was about 15 months ago, and the repository has little visible adoption or security documentation. It is still licensed, not deprecated or archived, and has a stable release with a clear package artifact.
64%
Total Score
100
81
83
The package has 7 releases, but none in the last 12 months; the latest release was about 15 months ago. This indicates slowing maintenance and lowers confidence in ongoing support.
The linked repository name does not match the package name and its README does not mention the package, so the repository connection is not clearly demonstrated. Organizational ownership provides some context but does not remove this transparency concern.
The repository has 0 stars, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little independent evidence of broad use or review.
The repository has no security policy. That is a documentation and vulnerability-reporting gap, although it does not by itself show that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
karelwintersky/arris.entity Version ^1 | — | — |
karelwintersky/arris.toolkit.xml-navigator Version ^0.99.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.