Unfit to use: this release is deprecated and its source repository has been archived since July 2016. The package has only one release, no recent maintenance, and no replacement is listed, despite having a clear license, documentation, and release notes.
12%
Total Score
25
56
50
Packagist marks the entire package as abandoned, with no replacement package provided. This is a severe adoption risk because the registry itself indicates the package should no longer be depended on.
The package has only one release, published more than 10 years ago, with no releases in the last 12 months. That provides strong evidence of abandonment rather than an actively maintained dependency.
The repository recorded zero commits and zero active maintainers in the last three months. This confirms that maintenance has not resumed despite the package remaining identifiable and documented.
The linked repository is archived and was last pushed in July 2016, indicating the project is no longer maintained. This outweighs its historical popularity and organization ownership.
The package defines post-install and post-update Composer scripts. These are normal for an installer-oriented package, but they increase the importance of trusting an old, abandoned release and provide no evidence of current maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pattern-lab/core Version ^2.0.0 | — | — |
pattern-lab/plugin-reload Version ^2.0.0 | — | — |
pattern-lab/patternengine-mustache Version ^2.0.0 | — | — |
pattern-lab/styleguidekit-mustache-default Version ^3.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.