The package is clearly identified, licensed, documented, and still receiving registry releases. Its single-contributor repository shows no commits or merged pull requests recently, and it has no published security policy or scanning tooling.
68%
Total Score
67
100
88
83
The repository recorded zero commits and zero active maintainers in the last three months. Recent registry releases partly offset this, but the current source activity still leaves maintenance continuity uncertain.
There are no new or closed issues in the last month and 12 open pull requests with no recent merges, suggesting limited project responsiveness despite the absence of open issues.
Composer build tooling is present, but no security scanning tools are configured, leaving a modest transparency and maintenance gap.
The repository has no security policy, so it provides no documented path for reporting vulnerabilities or describing security handling.
The current v0.1.16 release is not a stable major version, which indicates some maturity uncertainty, although it is not marked as a prerelease and recent releases are consistent.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
paulzi/cmyii-core Version ^0.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.