The package has no license, README, or security policy. Its repository matches the package and has no install scripts, but that does not offset the lack of maintenance.
15%
Total Score
0
40
50
Only two releases were published, both on March 24, 2016, with no releases in more than 10 years. This is strong evidence of abandonment.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring in March 2016.
Neither the package nor the repository declares or contains a recognized license. That leaves the legal terms for using this dependency unclear.
The package and repository each contain only composer.json, providing little source or documentation transparency for a dependency.
The package has no README, which matters to consumers, while the absence of tests and a changelog is normal for a published artifact. No release notes compensate for the missing documentation.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
mazhalai/test-package2 Version 1.1.* | — | — |
mazhalai/test-package3 Version 1.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.