Its small, focused package has a clear README, a declared MIT license, and only two runtime dependencies. The repository is not archived and has no install-time scripts, but it offers no security policy or automated tests.
48%
Total Score
38
100
72
88
The package has only one release, published about 3 years and 10 months ago, with no releases in the last 12 months. This is strong evidence of a stagnant release line.
The repository recorded zero commits and zero active maintainers in the last 3 months, following a last push about 3 years and 10 months ago. This is the clearest abandonment concern.
One registry maintainer account is consistent with a small user-owned package, but it provides little redundancy if that maintainer stops responding.
The repository is owned by an individual user rather than an organization, so the single maintainer and limited activity provide no organizational backing to compensate for the small maintenance base.
There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with a small package, but it also shows no visible community maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.0 | — | — |
mobiledetect/mobiledetectlib Version ~2.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.