The package lacks a README, security policy, and security scanning, while all seven workflow actions are unpinned. Its tests, license, and organization ownership provide some supporting evidence but do not offset the maintenance concerns.
8%
Total Score
0
33
50
Packagist marks the entire package as abandoned, with no replacement provided. This is a direct warning against taking a new dependency on the release.
This is the package's only release, published nearly 3 years ago, with no releases in the last 12 months. That strongly supports an abandonment concern.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the archived state and lack of ongoing maintenance.
The linked repository is archived and was last pushed nearly 3 years ago, so ongoing maintenance and fixes should not be expected.
The artifact includes tests, but it has no README, leaving consumers without in-package integration guidance for this plugin.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
manticoresoftware/buddy-core Version v0.1.0 | — | — |
manticoresoftware/manticoresearch-backup Version ^1.0.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.