The README and MIT licensing make installation and reuse straightforward. Maintenance appears paused, so future compatibility and fixes may depend on the single publisher or outside contributions.
58%
Total Score
33
100
81
50
There were no commits and no active maintainers in the last three months. Combined with the old latest release, this is the strongest evidence that maintenance has paused.
Only one registry account has publish access, which limits publishing redundancy. This is a modest concern for a small package, but it does not by itself show abandonment.
The latest release was about two years ago, and there were no releases in the last 12 months. This suggests paused maintenance, though the package has 13 releases over its lifetime.
There are no new issues in the last month and one issue was closed, but two pull requests remain open and none were merged recently. This offers little evidence of active ongoing development.
Composer is used as the build tool, which fits the package ecosystem, but no security-scanning tooling is reported. The missing scanner is a minor hygiene gap rather than a maintenance verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
johngrogg/ics-parser Version ^3.1 | — | — |
roundcube/plugin-installer Version >=0.1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.