The BSD license and included tests provide basic transparency. No release or repository activity has appeared since March 2013, and the library has no README or security policy, leaving maintenance and integration risks unresolved.
38%
Total Score
56
50
This package has only one release, with no releases in the last 12 years and the latest published on March 6, 2013. That is strong evidence of abandonment for a dependency.
The package includes tests, which is a small positive, but it has no README and no changelog; the missing README is a real integration gap for a library consumers must understand.
The repository has zero stars and forks and only one watcher, providing little evidence of an active user or contributor community. Popularity is supporting evidence, so this is a secondary concern.
Composer is used for the build, but no security-scanning tooling is present. This is a modest hygiene gap, not evidence that the release is unsafe by itself.
The repository is not archived, which avoids the most severe abandonment signal, but its last push was also on March 6, 2013 and does not offset the stagnant release history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
stalxed/system Version 0.2.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.