The package has strong consumer documentation, tests, a changelog, and organization backing. Workflow references are unpinned and no security policy is published, adding maintenance and build-transparency concerns.
61%
Total Score
67
50
88
50
The package has six runtime dependencies, including PHP extensions and two MARC libraries. This is a meaningful integration surface but is consistent with the package's stated adapter role.
The package has 18 releases over about 11 years, but its latest release was about 2 years 7 months ago and there were no releases in the last 12 months, indicating stale maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the broader evidence that maintenance has stopped or slowed substantially.
There were no new or closed issues or pull requests in the last month, while five issues and three pull requests remain open; this suggests limited current triage.
The linked repository is not archived, although its last push was about 2 years 2 months ago, so the non-archived status only partly offsets the age of the project activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pear/file_marc Version @dev | — | — |
ck/file_marc_reference Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.