The README, matching repository, stable version, and simple dependency set make the package understandable to integrate. However, its maintenance and licensing evidence are too weak for a dependable long-term dependency.
43%
Total Score
50
70
75
This is the only release, published about 5 years ago, with no releases in the last 12 months. That strongly suggests the package may be abandoned, despite the stable version.
The manifest declares the package proprietary, with no detected license and no license file. This creates a significant legal and redistribution concern for a package described as open source.
There are no open issues or pull requests and no recent activity. While a quiet issue tracker is not inherently unhealthy, it provides no evidence of current maintenance here.
The repository has no security policy. This is a transparency gap, though its impact is limited compared with the much older release history and licensing concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ~1.0 | — | — |
hypejunction/acl_builder_api Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.