18%
Total Score
critical
Unfit to use: the source repository is archived and release activity stopped years ago.
The package has 19 releases but none in the last 12 months; its latest release was in March 2021. The long release gap indicates substantial abandonment risk.
There were no commits and no active maintainers in the last three months. This confirms that maintenance has collapsed rather than merely slowed.
The linked repository is archived, and its last push was in March 2022. This is strong evidence that the package is no longer maintained.
No license is declared, and neither the package nor repository contains a license file. This creates a material adoption and redistribution concern.
The repository has no security policy. That leaves vulnerability reporting and response expectations undocumented, although this is secondary to the repository's abandonment.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
andreyco/instagram Version ^4.1.1 | — | — |
facebook/graph-sdk Version ^5.6.1 | — | — |
iamcal/lib_autolink Version v1.7 | — | — |
kaishiyoku/picofeed Version ^2.0.0 | — | — |
abraham/twitteroauth Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.