18%
Total Score
critical
Unfit to use: deprecated, with no release or commit activity since 2023.
Packagist marks the package deprecated at package scope and names basis-company/framework as its replacement, directly indicating that new dependents should migrate away.
The latest release was on February 22, 2023, with no releases in the following 12 months; this is a multi-year release gap despite a long prior history of frequent releases.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap and indicating no current maintenance activity.
The repository name does not match nekufa/basis and its README does not mention the package, so the link does not clearly establish package-specific ownership or documentation.
Composer is used for builds, but no security scanning tooling was detected; this is a hygiene gap, secondary to the package's abandonment indicators.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version >=1.0 | — | — |
psr/container Version ^1.0|^2.0|^3.0 | — | — |
psr/http-message Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.