The repository includes tests, a README, release notes, and a matching source project, while its small dependency set has no install scripts. The licensing records conflict, and there is no security policy; maintenance evidence is also very old.
15%
Total Score
75
100
50
83
Packagist marks the entire package as abandoned, with no replacement identified in the metadata. This is a direct warning against adopting the release.
Only two releases exist, and none were published in the last 12 months; the latest release was in January 2019, roughly 7 years ago. This strongly indicates abandonment risk.
The package declares MIT, while the repository license file is detected as GPL-3.0 and no artifact license file is present. The mismatch creates uncertainty for downstream use.
There are no open issues or pull requests and no activity in the last month. While a clean tracker can be benign, alongside the stale repository it provides no evidence of ongoing maintenance.
Composer build tooling is present, but no security-scanning tools are reported. This is a minor hygiene gap rather than a standalone adoption blocker.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jikan-me/jikan Version ~1.0 | — | — |
mustache/mustache Version ^2.12 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.