The package has a minimal source tree, no tests, and no security policy. Its single release was published over ten years ago, with no subsequent release or recent repository activity, making long-term maintenance unlikely.
38%
Total Score
50
100
63
75
There has been only one release, published over ten years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a package intended for ongoing use.
One registry account publishes the package. The linked repository is owned by the same individual, so this is consistent with a small personal project but leaves little maintainer redundancy.
The package and repository each contain only eight files, including one controller and basic configuration. This very small implementation may be intentional, but it provides little evidence of mature maintenance or testing.
A README is present and this package includes a GitHub release, but the README is only 256 characters and contains an unresolved placeholder install command. The absence of tests and a changelog in the published artifact is normal packaging practice, while the repository also reports no tests or changelog.
There are no open issues or pull requests and no issue or pull-request activity in the last month. Combined with the old last release, this is consistent with an inactive project.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cakephp/cakephp Version ~3.0 | — | — |
get-stream/stream Version ~2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.