The package is small and clearly licensed, with no install-time scripts or registry deprecation. It has had no release or commit activity for about four years, and lacks a README, tests, security policy, and security scanning, leaving limited evidence of ongoing maintenance.
42%
Total Score
25
72
75
The latest release was published in July 2022, with no releases in the past 12 months despite a package age of about five years. This is a substantial abandonment concern.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the long release gap and weakening confidence in ongoing maintenance.
Only one registry publishing maintainer is listed, and the project backing identifies a user-owned repository rather than an organization. This leaves a thin apparent maintainer base when combined with inactive commits.
The package has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the absent README is a real usability and transparency gap for a library consumers must integrate.
The repository has zero stars and forks and only one watcher. Low popularity is supporting evidence rather than a verdict, but it provides little external evidence of active adoption or review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
net-tools/core Version ^1.0.0 | — | — |
mike42/escpos-php Version ^4.0.0 | — | — |
net-tools/gd-indexed-color-converter Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.