The MIT license and four runtime dependencies make the package easy to evaluate. There is no security policy, so maintenance expectations and reporting paths are unclear.
38%
Total Score
0
75
50
The latest release was in April 2016, over 10 years ago, and there have been no releases in the last 12 months. Only four releases indicate a project with very limited ongoing delivery.
The repository has had zero commits and zero active maintainers in the last 3 months, with the last push recorded in April 2017. This strongly supports an abandonment concern.
The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these values provide no meaningful sign of an active user or contributor community.
No security policy is present, leaving no documented process for reporting vulnerabilities or setting maintenance expectations. This is a transparency gap, not evidence of malicious behavior.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
leafo/lessphp Version ~0.1 | — | — |
kriswallsmith/assetic Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.