The README is only 15 characters, and the package carries nine runtime dependencies without collected project evidence to explain their maintenance. The BSD-3-Clause license and lack of install scripts are positives, but the repository could not be found, limiting transparency.
32%
Total Score
50
63
100
This package has only one release, published more than 12 years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a dependency.
Nine runtime dependencies create a substantial maintenance surface for a package with no recent releases or collected project activity. Their presence does not prove breakage, but it increases the risk of depending on an unmaintained integration layer.
The artifact includes a README, but it is only 15 characters long and provides virtually no consumer guidance. The absence of tests and a changelog in the published artifact is expected packaging practice and is not a concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tedivm/jshrink Version >=v0.5.2 | — | — |
ckeditor/ckeditor Version >=4.3.4 | — | — |
frameworks/jquery Version =2.1.0 | — | — |
tecnick.com/tcpdf Version >=6.0.062 | — | — |
phpoffice/phpexcel Version >=1.8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.