The package has a clear MIT license, a usable README, and repository tests, but its workflows use 18 unpinned actions and contain a high-confidence template-injection finding. Its release history is sparse recently, with no commits in the last three months.
8%
Total Score
0
58
67
Packagist marks the entire package as abandoned, with no replacement specified. This is a severe maintenance and adoption risk for a new dependency.
The repository recorded 0 commits and 0 active maintainers in the last three months. This supports the abandonment concern rather than indicating merely slow development.
The linked repository is archived even though it was last pushed on October 22, 2025. An archived source project is not an active maintenance base.
The package has 14 releases over about five years and one release in the last 12 months, with a median interval of about 48 days. The recent release shows some prior activity, but the current maintenance signals are substantially weaker.
The repository has no security policy. This is a transparency gap, although the repository does provide other security tooling such as CodeQL, dependency review, and Dependabot.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laminas/laminas-view Version ^2.42.0 | — | — |
laminas/laminas-servicemanager Version ^3.22.1 | — | — |
mimmi20/laminasviewrenderer-helper-htmlelement Version ^3.0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.