The shared package for other phossa packages
43%
Total Score
33
100
83
90
There were zero commits and zero active maintainers in the last three months, consistent with the repository last being updated in 2016. This is the strongest evidence that maintenance has effectively stopped.
One registry account has publishing access. This is limited redundancy, but the repository and package are consistently associated with the same project owner, so it is not independently decisive.
The registry namespace and repository owner match, but the owner is an individual user rather than an organization. This confirms linkage without providing organizational maintenance backing.
The package has 11 releases, but its latest release was in May 2016 and it has had no release in the last 12 months. This long release gap is a meaningful maintenance and abandonment concern.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide no additional adoption or maintenance reassurance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.