It includes a README, changelog, MIT license, and no install-time scripts. However, the package is deprecated, archived, and inactive, so pinning it creates substantial abandonment risk.
12%
Total Score
0
40
75
Packagist marks the entire package as abandoned, with no replacement specified. Package-level deprecation is a severe adoption risk despite the otherwise complete artifact.
The package has six releases but none in the last 12 months; its latest release was about 3 years and 3 months ago. This strongly indicates abandonment for a maintained dependency.
The repository recorded zero commits and zero active maintainers over the last 3 months, consistent with its archived state and the lack of recent releases.
The linked repository is archived and was last pushed about 3 years and 3 months ago, indicating the project is no longer maintained.
The repository has no security policy. This is a transparency and maintenance gap, although the stronger abandonment signals already determine the assessment.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ^2.2 | — | — |
mundschenk-at/php-typography Version ^6.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.