Recent development is limited to three commits by one contributor, with no new or closed issues in the past month. The repository has tests and a clear MIT declaration, but workflow findings and the package/repository naming mismatch add uncertainty.
18%
Total Score
63
67
75
The registry marks the entire package as abandoned and names puyu-pe/qillqay as its replacement, making continued dependency on this package a severe lifecycle risk.
The package has 34 releases over about three years, but only one release in the last 12 months, indicating sharply reduced release activity.
All three recent commits came from one contributor, so maintenance depends entirely on a single active person despite the repository being organization-owned.
The repository had only three commits in the last three months, all from one active maintainer, which provides limited evidence of ongoing maintenance capacity.
Eight issues remain open, with no new or closed issues and no pull-request activity in the last month, suggesting limited visible issue handling.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.0 | — | — |
bacon/bacon-qr-code Version ^2.0 | — | — |
mikehaertl/phpwkhtmltopdf Version ^2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.