mf2/shim
It includes tests, a usable README, and a small Composer dependency set, with an organization owning the repository. The MIT declaration conflicts with the BSD-3-Clause license file, and no security policy is published.
44%
Total Score
50
100
69
75
Health Score Breakdown
The latest release was in April 2014, with no releases in the last 12 months. That long absence of releases is a substantial maintenance and abandonment concern.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with its last push being in 2016. This indicates prolonged inactivity.
The artifact declares MIT, but its license file was recognized as BSD-3-Clause. The release is licensed, yet the mismatch creates avoidable legal ambiguity.
The repository has 15 stars and 5 forks, showing some historical use but limited external adoption. Popularity is supporting evidence and does not offset the inactive maintenance record.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than evidence of abandonment by itself.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Barnaby Walters |
| Aaron Parecki |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mf2/mf2 Version ~0.2.6 | — | — |
Weekly Downloads
Info
- Last Published
- 12 years ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.