Its BSD-2-Clause license, tests, README, and matching source repository provide useful transparency. The package also lacks security scanning and has little community activity, adding to the maintenance concern.
10%
Total Score
0
50
Packagist marks the entire package as abandoned, with no replacement specified. This is a direct warning that new projects should not depend on it.
The latest release was published in May 2016, and there were no releases in the last 12 months. This indicates roughly a decade without release maintenance.
The repository recorded no commits and no active maintainers in the last 3 months, consistent with the archived state and prolonged inactivity.
The linked repository is archived and was last pushed about 8 years ago, so its source is no longer maintained.
The repository has no stars or forks and only 12 watchers, providing little evidence of an active user or contributor community. This supports the abandonment concern but is not decisive alone.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phergie/phergie-irc-bot-react Version ~2 | — | — |
phergie/phergie-irc-plugin-react-url Version ~3 | — | — |
phergie/phergie-irc-plugin-react-command Version ~2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.