The package has clear usage documentation, a license file, and a focused dependency set. Its single-contributor activity, old registry release, and license mismatch leave maintenance and provenance concerns.
58%
Total Score
50
100
81
75
The release includes a license file and the repository also has one, but the manifest declares BSD-3-Clause while the artifact license file was detected as MIT. That mismatch reduces licensing clarity.
The repository is owned by a user account rather than an organization, so the concentrated contributor activity is less easily compensated by formal project backing.
The latest registry release was published in January 2020, with no releases in the last 12 months. This is a meaningful maintenance concern despite the repository being pushed recently.
All recent commit activity came from one contributor, creating a concentrated maintenance dependency for a user-owned repository.
Only one commit was recorded in the last three months. The recent push is encouraging, but this is too little activity to demonstrate a strong maintenance cadence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laminas/laminas-form Version ^2.11 | — | — |
laminas/laminas-captcha Version ^2.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.