Its dependency surface is minimal, and the release is explicitly MIT-licensed. Pin this version only when its compatibility with your VuFind/AkSearch deployment is already established.
42%
Total Score
25
100
67
83
The package has had no release in about five and a half years, and no releases in the last 12 months. Its 11 releases were concentrated in a short initial burst, leaving current maintenance uncertain.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap and indicating a substantial abandonment risk.
Only one registry publishing account is listed. That is not inherently unsafe for a small extension, but it leaves little visible publishing capacity when combined with the absence of recent activity.
The package has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the missing README reduces consumer guidance for an extension that must be integrated with a host application.
Composer is used for builds, but no security-scanning tooling is present. This is a transparency and maintenance gap, though it does not by itself make the release unfit.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.