The package includes a concise README, a release note for this version, and two runtime dependencies. Its organization-owned repository is not archived, and no install scripts or workflow findings were detected.
42%
Total Score
50
67
The latest release was published in November 2020, nearly six years ago, and there have been no releases in the last 12 months. The long median interval also indicates a slow project, but the extended silence raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with nearly six years since its last push. This is strong evidence that maintenance has stopped.
No license declaration, license file, or repository license file was detected. Although the README mentions GPL V2, the collected license evidence does not establish a machine-detectable license for the release.
The repository name does not match the package name and its README does not mention the package. That mismatch makes package-to-source ownership less transparent, even though subpackages can legitimately use monorepo repositories.
The repository has zero stars and forks, with six watchers. Low popularity is supporting evidence rather than decisive by itself, but it provides little external evidence of active use or review.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
papaya/composer-plugins Version 2.* | — | — |
papaya/template-responsive Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.