The repository is not archived and includes tests, release notes, and a matching README. However, absent recent commits, releases, security scanning, and a security policy leave substantial abandonment and maintenance risk.
44%
Total Score
33
100
78
83
The package has had no releases in nearly seven years and none in the last 12 months, which is a substantial maintenance concern despite its 12-release history.
There were no commits and no active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.
Only one registry account has publish access, which limits publishing redundancy; the matching repository and project namespace provide some context but do not demonstrate active maintenance.
The registry namespace and repository owner match, but the owner is an individual account rather than an organization; this offers limited backing evidence.
The repository has zero stars and forks and one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little external evidence of maturity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nabu-3/sdk Version ^3.0.9 | — | — |
nabu-3/provider-mysql-driver Version dev-master | — | — |
nabu-3/composer-installer-plugin Version >=3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.