The tiny artifact has no README, tests, or changelog, although this release includes notes and the repository remains tied to the Nutgram organization. MIT licensing, no install scripts, and a modest dependency set reduce friction but do not offset the long inactivity.
45%
Total Score
50
100
71
100
Only two releases were published, both on June 28, 2023, with none in the following three years. That is strong evidence of an unmaintained release line.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long gap since the last package release.
The package has no README, tests, or changelog, which weakens consumer guidance and project transparency. The exact release does include GitHub release notes, partly compensating for the missing changelog.
Composer is used for the build, but no security scanning tooling is present. The missing scanner is a hygiene gap rather than evidence of unsafe maintenance on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nutgram/nutgram Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.