The README is clear and the dependency set is small, but project transparency and ongoing safeguards are limited. Choose an actively maintained replacement rather than adding this package to a new project.
12%
Total Score
0
42
75
Packagist marks the entire package as abandoned, with no replacement named. This is a direct indication that new dependencies should not be built on it.
The package has four releases over about 10 years, with no release in the last 12 months and a latest release on December 13, 2022. This supports the abandonment concern rather than showing active maintenance.
The repository recorded no commits and no active maintainers in the last three months. Together with the archived state, this provides strong evidence of absent maintenance capacity.
The linked repository is archived, and its last push was on December 13, 2022. Archived source indicates the project is no longer accepting normal maintenance.
The repository name does not match the package name, and its README does not mention the package. Although subpackages can use differently named repositories, both checks failing creates uncertainty about package ownership and provenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mustache/mustache Version ^2.14 | — | — |
page-carbajal/wpexpress Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.