The MIT license, focused eight-file package, and clear README make adoption and auditing easier. It has no tests or security scanning, and its single maintainer leaves little evidence of ongoing care.
38%
Total Score
75
100
88
88
This is the only release, published nearly ten years ago, with no releases in the last 12 months. That leaves substantial uncertainty about compatibility and ongoing maintenance.
There were no commits and no active maintainers in the last three months, consistent with the repository having stopped changing nearly ten years ago. This is meaningful abandonment risk for a library dependency.
Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a maintenance and assurance gap, though not severe on its own.
The repository has no security policy, leaving no documented channel or process for handling vulnerability reports. This lowers transparency for a package that has seen no recent maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ncaneldiee/rajaongkir Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.