The BSD-3-Clause license and matching license file make reuse clear, and the repository is not archived. Its small dependency footprint and package README help, but there is no recent activity or security policy.
46%
Total Score
0
100
70
50
The latest release was published in March 2019, with no releases in the last 12 months; the package has had no release for about 7 years and 6 months. This is strong abandonment evidence despite its 18-release history.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap. The source remains available, but that does not compensate for the lack of observed maintenance.
Composer build tooling is present, but no security-scanning tool was detected. This is a minor supply-chain hygiene gap and adds little reassurance for a package with no recent maintenance.
The linked repository has no security policy. For a package integrating external video content, this is a transparency and issue-reporting gap, though it is less serious than the absent maintenance activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
rcm/core Version ^1.7.0 | — | — |
rcm/core-js Version ^1.0.0 | — | — |
rwoverdijk/assetmanager Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.