Clear licensing, documentation, and organization backing support adoption. Its small dependency surface and stable release format help, but the maintenance evidence is too old for a current dependency.
42%
Total Score
50
100
75
50
The package has had no release in over six years, despite 17 releases historically; this is strong evidence that maintenance has stopped.
The repository shows zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.
Composer build tooling is present, but no security-scanning tool was detected, leaving a minor assurance gap that is less important than the inactivity evidence.
The repository is not archived, which leaves a path for future maintenance, but its last push was in June 2020 and does not offset the inactivity shown elsewhere.
The linked repository has no security policy, leaving vulnerability-reporting expectations unclear; this adds a modest transparency concern alongside the broader maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
o2system/kernel Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.