10%
Total Score
critical
Unfit to use: the package is deprecated and its source repository is archived.
Packagist marks the entire package as abandoned and identifies adiera/csp as its replacement. Package-level deprecation directly makes adopting this release unfit.
The package has only four releases, with the latest published in October 2016 and none in the last 12 months. This is strong evidence of abandonment for a package assessed today.
There were zero commits and zero active maintainers in the last three months. This corroborates the archived state and shows no current maintenance capacity.
The linked repository is archived and was last pushed in January 2017. An archived source repository is a severe abandonment risk for a dependency.
Composer is used for builds, which is appropriate for this package, but no security scanning tools are present. The missing scanning is a secondary hygiene gap rather than the main adoption barrier.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
adeira/csp Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.