LLPhant is a library to help you build Generative AI applications.
58%
Total Score
caution
Usable with caveats: one release and more than a year without commits point to uncertain maintenance.
The package has only one release, published over a year ago, with no releases in the last 12 months. That leaves limited evidence of sustained maintenance.
The repository recorded no commits and no active maintainers in the last three months, consistent with no activity since the March 2025 release and raising abandonment concerns.
The repository has no security policy, which weakens vulnerability-reporting transparency, although its automated security scanning partly compensates.
Version 0.9.7 is not marked as a prerelease, but the 0.x major version signals that compatibility may still change before 1.0.
All three workflows were analyzed without dangerous triggers or audit findings, but all eight referenced actions are unpinned, leaving avoidable dependency-integrity exposure in the build process.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0 | — | — |
guzzlehttp/psr7 Version ^2.7 | — | — |
psr/http-message Version ^2.0 | — | — |
smalot/pdfparser Version ^2.11 | — | — |
guzzlehttp/guzzle Version ^7.4.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.