Usable with caveats: the package is licensed, stable, correctly backed by an organization, and not deprecated or archived. However, it has had no release or repository commit activity for about six years, so maintenance and compatibility should be verified before adoption.
58%
Total Score
50
100
83
88
The repository recorded zero commits and zero active maintainers over the last three months, after no meaningful activity for about six years. This is the main adoption concern because compatibility problems may go unaddressed.
Only one registry account has publish access, which is a limited publishing base. The organization-owned repository provides some compensating project backing, so this is a modest concern rather than a severe risk.
The package has only three releases and no releases in the last six years; its long median release interval indicates limited maintenance activity. The release history is established but materially stale.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is consistent with a small, inactive package but provides no evidence of ongoing maintenance.
The repository has no stars and one fork, indicating very limited visible adoption. Popularity is only supporting evidence, so this lowers confidence in maturity but is not decisive alone.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ~1.0 | — | — |
mouf/mouf-installer Version ~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.