39%
Total Score
unhealthy
Risky: no releases or commits since November 2020, with no license declaration or license file.
The artifact and repository contain neither a declared license nor a detected license file, leaving the legal terms for dependency use unclear.
Only two releases exist, and there have been no releases since November 2020; the roughly five-year gap indicates substantial abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and weakening confidence in ongoing maintenance.
The repository name does not match the package name and its README does not mention the package, so the linkage is less transparent even though the repository is in the matching organization.
The repository has no security policy, a transparency gap for reporting and handling issues, although the small legacy theme scope limits its weight.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
papaya/composer-plugins Version 2.* | — | — |
papaya/template-default-xhtml Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.