Usable with caveats: it has a stable release, clear licensing, tests, documentation, and a matching source repository, but maintenance appears to have stopped more than three years ago. The inactive repository and lack of security tooling make long-term dependency risk significant.
55%
Total Score
33
50
81
75
The repository had zero commits and zero active maintainers in the last three months, consistent with maintenance having stopped for more than three years.
The package has nine runtime dependencies, including several namespace-related packages and web/database components; this is a moderate maintenance surface, though not inherently excessive.
The package and repository are owned by the same individual account, providing direct ownership alignment but no organizational backing to compensate for the inactive maintenance record.
The project has 108 releases since April 2020, but it has made no release in more than three years, which is a meaningful abandonment concern despite its earlier cadence.
There are 16 open issues, while no issues or pull requests were opened or closed in the last month, indicating unresolved work and no recent community activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^5.4 | — | — |
twbs/bootstrap Version ^5.1 | — | — |
sagittaracc/html Version ^0.1 | — | — |
sagittaracc/qmap Version ^0.1 | — | — |
sagittaracc/tsml Version ^0.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.