There are no tests, changelog, security scanning, or license records, and the README says documentation and support are unavailable. The repository is still linked and not archived, but its tiny footprint and lack of recent activity leave substantial maintenance risk.
30%
Total Score
0
67
75
The package has had no releases in nearly 10 years, with zero releases in the last 12 months. This is strong evidence of abandonment for a dependency expected to receive maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap. No provided signal compensates for this lack of current maintenance.
No declared license, license file, or repository license file was detected. That leaves the legal terms for using this package unclear.
The artifact includes a README, but it explicitly says documentation, changelog, and support are unavailable; no tests or release notes were found. The README is a small positive, but the missing consumer and maintenance information is material for this library.
The repository has zero stars and forks and only two watchers. Popularity is supporting evidence rather than a verdict, but these counters provide no additional evidence of an active user or contributor community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
platform/foundation Version >=2.0 <5.0 | — | — |
cartalyst/composer-installers Version >=1.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.