The license metadata conflicts with the MIT license file, and the package offers no README for consumers. Its workflow uses an unpinned action, while organization ownership provides some continuity.
42%
Total Score
50
64
75
This is the sole release, published about three years ago, with no releases in the last 12 months; that strongly raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and limited evidence of ongoing maintenance.
The artifact contains an MIT license file, but the manifest declares the package proprietary; that mismatch reduces clarity for adopters despite the detected license.
The published library has no README, tests, or changelog. Missing tests and changelog are normal in published artifacts, but the missing consumer documentation is a real integration gap for a framework library.
The repository uses Composer but reports no security-scanning tooling, leaving a maintenance and transparency gap alongside the otherwise present build tooling.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0|^2.0|^3.0 | — | — |
symfony/mailer Version ^6.2 | — | — |
league/commonmark Version ^2.2 | — | — |
quantaforge/support Version ^1.0.0 | — | — |
quantaforge/container Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.