Skully Project
38%
Total Score
unhealthy
Risky: no release or repository activity for over 11 years, compounded by a license mismatch.
The manifest declares MIT, but the artifact license detection identifies LGPL-2.1 and multiple bundled license files. This mismatch makes the release's licensing obligations unclear.
The latest release was published over 11 years ago, and there have been no releases in the last 12 months. That strongly increases abandonment risk despite the package having 13 historical releases.
There were no commits and no active maintainers in the last three months, consistent with a project that has been dormant for years. This is a substantial maintenance concern.
The repository has only 1 star and 1 fork, indicating very limited adoption. Popularity is supporting evidence rather than a verdict, but it provides little external confidence here.
The repository uses Composer for builds, but no security scanning tools were detected. The build setup is positive, while the lack of scanning is a modest transparency gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
phpmailer/phpmailer Version v5.2.7 | — | — |
skullyframework/skully Version 0.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.