This is a usable but immature package with clear licensing, repository alignment, tests in both the artifact and repository, no install-time scripts, and no deprecation or archive status. However, it has only two releases across roughly 3 years, zero commits and active maintainers in the last 3 months, no repository security scanning or security policy, and negligible repository adoption, so maintenance continuity and security transparency remain concerns. The repository was pushed very recently and the package is not deprecated, which partially offsets the weak recent activity, but adoption should be cautious until the project demonstrates sustained maintenance.
68%
Total Score
50
100
78
90
The repository is owned by an individual user rather than an organization, offering less visible institutional backing for continuity, though this alone does not establish abandonment.
Only two releases have been published over about 3 years, with one release in the last 12 months; this indicates limited release maturity and an uncertain maintenance cadence.
There were zero commits and zero active maintainers in the last 3 months. Although the repository was pushed very recently according to repository_archived, the measured recent activity still indicates a thin or intermittent maintenance pattern.
The repository has zero stars and forks and only one watcher, providing little external validation or evidence of a broad maintenance community; popularity is supporting evidence, so this is a caution rather than a severe risk.
Composer build tooling is present, but no security scanning tools are configured, leaving a security-transparency gap for a dependency project.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
osynapsy/osynapsy-html-bcl Version @stable | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.