Unfit to use: the package is marked abandoned and its source repository is archived. No releases or commits have appeared in the last 12 months, so ongoing maintenance and compatibility support cannot be relied on.
12%
Total Score
50
50
50
Packagist marks the entire package as abandoned, with no replacement package provided. This is a severe adoption risk because the publisher has withdrawn ongoing support for the dependency.
The package has 13 releases and a short historical median interval of about 10 days, but it has had no release in the last 12 months. The recent halt outweighs the earlier cadence.
The repository recorded zero commits and zero active maintainers in the last three months. Together with the archived status, this indicates no current maintenance capacity.
The linked source repository is archived, so it is no longer an actively maintained project. Its last push was about 12 months ago, reinforcing the abandonment concern.
The repository uses Composer build tooling, which supports reproducible project setup, but it has no security scanning tools. This is a secondary transparency gap beside the stronger abandonment signals.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
log1x/navi Version * | — | — |
roots/acorn Version ^4.0 | — | — |
roots/acorn-prettify Version ^1.0.0 | — | — |
stoutlogic/acf-builder Version ^1.9 | — | — |
johnbillion/extended-cpts Version ^4.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.