Clear documentation, licensing, and repository ownership make the package transparent. Its small dependency set and lack of install-time scripts reduce adoption friction, but the project shows no recent delivery activity.
42%
Total Score
63
100
72
88
The package has eight releases, but none in the last five years and its latest release was in February 2021, which is a serious abandonment concern.
There were zero commits and zero active maintainers in the last three months, reinforcing the release-history evidence of a dormant project.
There were no new or merged pull requests in the last month and no issue activity, offering no evidence of current maintenance or responsiveness.
The repository has no stars or forks and one watcher. Popularity is only supporting evidence, but these values provide little evidence of a broad user or contributor base.
The repository uses Composer, but no security scanning tools were detected, leaving a modest security-process gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pop-schema/tags Version ^0.7.13 | — | — |
pop-schema/migrate-everythingelse Version ^0.7.13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.