Assets required/helpful for simplon/mvc
35%
Total Score
unhealthy
Risky: no license, no releases since 2015, and a repository that does not clearly match the package.
The package has had only two releases, both on 2015-10-28, with no release in about 10 years and 11 months. That strongly indicates abandonment risk.
No license is declared, detected, or included in the package or linked repository. This creates a material adoption and legal-transparency concern.
The artifact contains only composer.json and two minified vendor assets, with no apparent package implementation or documentation. That is a thin and opaque basis for depending on it.
The package has no README, tests, changelog, or release notes. Missing tests and changelog are normal for published artifacts, but the absent README makes this library harder to evaluate and consume.
The linked repository name does not match the package name, and no README package mention was found. A name mismatch can be normal for a subpackage, but without a confirming mention the repository relationship is uncertain.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
simplon/components Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.