The stable major version and lack of registry deprecation are positives. No release has appeared since December 2018, the package has one maintainer, and its 14 runtime dependencies increase the cost of relying on an old release.
42%
Total Score
50
50
67
The package has 32 releases but none in the last 12 months, and the latest release was in December 2018. This long period without a release is strong evidence of abandonment risk.
The package declares 14 runtime dependencies, including framework, translation, and infrastructure components. That broad dependency surface makes an old, inactive release harder to maintain and integrate safely.
Only one account has registry publish access. This does not prove inactivity, but it leaves limited visible publishing capacity alongside the absence of recent releases.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0 | — | — |
nette/di Version ^2.4.10@dev | — | — |
nette/http Version ^2.4.7@dev | — | — |
nette/neon Version ^2.4.2@dev | — | — |
latte/latte Version ^2.4.6@dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.