The package includes a clear license, tests, a README, and no install-time scripts. Its tiny community footprint and missing security policy add uncertainty for a package with no recent maintenance.
38%
Total Score
33
100
78
75
The latest release was in July 2016, with no releases in the past 12 months. A package that has gone over ten years without a release carries substantial abandonment risk.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the long release gap and showing no current maintenance activity.
The source repository is owned by a user account rather than an organization, so there is no provided organization backing to compensate for the single registry maintainer or stagnant activity.
There were no new issues, closed issues, pull requests, or merged pull requests in the past month. This does not prove defects, but it provides no evidence of current project engagement.
The repository has 1 star, 0 forks, and 1 watcher, so there is little visible community support to compensate for the lack of maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
zf-commons/zfc-user Version 1.* | — | — |
goalio/goalio-mailservice Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.