The package includes a small, documented source tree, tests, and an MIT declaration. Its single maintainer and lack of security tooling provide little additional assurance for a package this old.
35%
Total Score
33
75
83
This package has only one release, published over 11 years ago, with no releases in the last 12 months. That strongly indicates the dependency is abandoned, with no newer release to address ecosystem changes.
The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the package's long period without releases. No compensating maintenance activity is shown.
The registry lists one maintainer, and project backing identifies a personal owner rather than an organization. A single-person project can be healthy, but here it provides limited resilience alongside the long inactivity period.
There has been no issue or pull-request activity in the last month, and one issue remains open. This is supporting evidence of inactivity rather than a separate severe risk.
The repository has no security policy. This is a transparency gap, although it is less important than the clear abandonment signal for this small, old package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
react/react Version 0.4.* | — | — |
laravel/framework Version 5.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.