The package includes tests, a stable version, an MIT declaration, and no install-time scripts. Its single-contributor publishing base, repository mismatch, absent security tooling, and no commits in the last three months make long-term support uncertain.
45%
Total Score
50
100
69
83
The package has 40 releases but none in the last 12 months; its latest release was over seven years ago, indicating prolonged inactivity.
There were no commits and no active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.
Only one registry account has publishing access, which limits publishing redundancy; the organization-backed repository provides some context but does not demonstrate active maintenance.
The repository name does not match the package name and its README does not mention the package, so the link may not clearly establish package ownership.
Composer build tooling is present, but no security scanning tools are configured, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
msbios/i18n Version ^1.0 | — | — |
msbios/stdlib Version ^1.0 | — | — |
msbios/widget Version ^1.0 | — | — |
msbios/assetic Version ^1.0 | — | — |
msbios/resolver Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.