32%
Total Score
67
100
72
80
Packagist marks the package as abandoned via packagist_abandoned, with no replacement specified. This is a severe warning for a new dependency and materially lowers confidence in its future maintenance.
The package and repository each contain only 7 files, including the core source, service provider, view, README, and license. The minimal structure is consistent with a small Statamic add-on, but leaves little visible scaffolding for validation or maintenance.
The artifact and repository include a substantial README, but neither includes tests or a changelog. For a small seven-file integration package this is a transparency and verification gap, not by itself proof that the package is unusable.
The repository is owned by an individual user rather than an organization. Individual ownership is not inherently unhealthy, but it provides less visible backing capacity and is consistent with the thin maintenance evidence.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Combined with the abandoned registry status, this supports a substantial maintenance-risk assessment despite the recent push timestamp.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.2 | — | — |
simplepie/simplepie Version ^1.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.