Preferences Framework for Oxygen
8%
Total Score
critical
The package is deprecated and its source repository is archived, with no releases or commits in the past year.
Packagist marks the entire package as abandoned, with no replacement specified. This directly signals that relying on this release carries substantial maintenance risk.
The package has 39 releases over a long history, but it has had no releases in the last 12 months and its latest release was on April 1, 2024. That indicates a prolonged release gap.
There were zero commits and zero active maintainers in the last three months. Together with the archived repository and abandoned registry status, this strongly supports an abandonment concern.
The linked repository is archived, which indicates the project is no longer intended for ongoing development. The recorded push date does not offset the explicit archived state.
The single workflow was fully analyzed with no audit findings or untrusted triggers, but all three action references are unpinned. That is a reproducibility and build-integrity hygiene gap, not a standalone severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
oxygen/core Version ~0.15.0 | — | — |
oxygen/data Version ~0.12.0 | — | — |
illuminate/support Version ^10.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.