The BSD-3-Clause license and small runtime dependency set keep adoption straightforward. Long-term maintenance risk remains high, so pinning this exact version is prudent.
48%
Total Score
50
100
50
75
The latest release was in November 2020, with no releases in nearly six years and only three releases overall. This is strong evidence of a dormant project, though the stable 1.0.1 version may still be adequate for a narrowly scoped package.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing a long maintenance gap. No provided signal demonstrates current maintenance capacity.
There were no new or closed issues or pull requests in the last month, while one issue and one pull request remain open. This indicates limited ongoing project activity and leaves maintenance responsiveness uncertain.
The linked repository has no security policy. For a small, dormant package this reduces transparency and provides no documented channel for reporting vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phar-io/filesystem Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.