54%
Total Score
50
100
79
75
Neither the registry metadata nor the package or repository contains a recognized license, leaving redistribution and usage rights unclear.
Only one registry publishing account is listed. Because the repository is user-owned rather than organization-backed, this leaves little visible publishing redundancy.
The package made five releases in its first year, but the latest release was nearly 11 months before collection, indicating maintenance has stalled after an initially active start.
There were zero commits and zero active maintainers during the last three months, which is direct evidence of a currently inactive project.
Composer is used for builds, but no security scanning tools are configured. This is a hygiene gap rather than evidence that the release is unsafe.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
gabordemooij/redbean Version ^5.7 | — | — |
wp-cli/php-cli-tools Version ^0.12.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.