10%
Total Score
0
40
50
Packagist marks the entire package as abandoned, with no replacement identified. This is a direct warning against adopting the release.
Only one release exists, published in December 2020, with no releases in the last 12 months and no subsequent release history. This leaves the package over five years without a maintained release line.
The repository recorded zero commits and zero active maintainers in the last three months, supporting the evidence of abandonment rather than merely reflecting a quiet release cadence.
The linked source repository is archived, which strongly indicates that future fixes and maintenance should not be expected.
The single workflow was fully analyzed with no untrusted checkouts or script-injection findings, but all three action references are unpinned. That is a reproducibility hygiene gap, not the main adoption risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.