The package has a clear license, documentation, and a security policy, but those positives do not offset its lack of ongoing development. Its repository and registry status indicate that future fixes and releases should not be expected.
12%
Total Score
25
42
100
Packagist marks the entire package as abandoned, with no replacement named; this is a severe adoption and future-maintenance risk.
The package has 187 releases but none in the last 12 months, despite a prior median interval of about 3.6 hours; the abrupt cessation reinforces the abandonment concern.
There were no commits and no active maintainers in the last 3 months, providing no evidence of current maintenance capacity.
The linked repository is archived and was last pushed on June 17, 2024, so it is not expected to receive normal maintenance.
The repository is owned by the OpenCatalogi organization, providing organizational context, but it does not compensate for the package being abandoned and archived.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
commongateway/corebundle Version >=1.1.68 | <2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.