The package includes tests and has only three runtime dependencies, but its project footprint provides little evidence of active support. Pin this exact version rather than expecting timely fixes or updates.
43%
Total Score
100
67
75
The package has had no releases in roughly five years, with zero releases in the last 12 months. Its nine releases show an earlier active period but do not compensate for the prolonged current inactivity.
No license is declared, and neither the package nor the linked repository contains a license file. This creates a material adoption and reuse concern.
The linked repository name does not match the package name, and no README mention was available to establish that it belongs to this package. That weakens source transparency, although a sub-package or naming difference remains possible.
The repository has zero stars and forks and only one watcher. Popularity is not decisive, but these values provide little supporting evidence of broad review or community backing.
Composer is used for the build, which is appropriate, but no security scanning tools are configured. That leaves dependency and code-risk checks less transparent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
scancode-system/ipi-module Version ^2.0 | — | — |
scancode-system/color-module Version ^2.0 | — | — |
scancode-system/scancode-base-module Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.