The package is MIT-licensed, has repository tests and a changelog, and is neither deprecated nor archived. Its very small user base and missing security policy add modest transparency concerns.
42%
Total Score
50
83
50
The latest release was in July 2016, with no releases in the last 12 months; nearly 10 years without a release is strong evidence of abandonment risk.
The repository has recorded zero commits and zero active maintainers in the last 3 months, while its last push was in May 2018. This confirms that maintenance has been inactive for about 8 years.
The repository has only 1 star, 0 forks, and 3 watchers, providing little evidence of a broad user or contributor base to sustain maintenance.
The repository has no security policy, leaving no documented path for reporting vulnerabilities. This is a transparency gap, though it is less significant than the long maintenance silence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nette/utils Version ~2.3 | — | — |
kdyby/events Version ~3.0 | — | — |
flame/modules Version ~2.3 | — | — |
nextras/forms Version ~1.4 | — | — |
nette/database Version ~2.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.