The package has clear licensing, tests, release notes, and usable documentation. Its maintenance record is too thin for a dependable long-term dependency, with no recent project activity or security policy.
44%
Total Score
25
100
78
88
This is a single-release package first and last published nearly three years ago, with no releases in the past 12 months. That is strong evidence of abandonment risk for a library dependency.
There were zero commits and zero active maintainers in the past three months. Combined with the one-release history, this materially increases abandonment risk.
There was no recent issue or pull-request activity, and no pull requests were merged in the past month. This offers no evidence of ongoing support.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no external adoption or maintenance signal.
The repository uses Make and Composer, but no security-scanning tools were detected. That is a maintenance and transparency gap, though not severe on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ircmaxell/random-lib Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.