Risky to adopt: this package has had no release for about five years and no recent repository activity. It remains licensed, documented, and backed by a matching organization repository, but the long release gap and inactive maintenance make it a liability for new dependencies.
42%
Total Score
50
83
The package has only one release, published about five years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a dependency, despite the repository still existing.
There were zero commits and zero active maintainers in the last three months. The last repository push was in 2023, so there is little evidence of current maintenance.
There are three open pull requests, with no issues or pull requests merged in the last month. Outstanding changes without recent integration support the concern that maintenance has stalled.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0 | — | — |
daikon/boot Version master@dev | — | — |
daikon/dbal Version master@dev | — | — |
daikon/interop Version master@dev | — | — |
clue/socket-raw Version ^1.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.