55%
Total Score
caution
Usable with caveats: 1.7.0 is explicitly the final Tripal 3 release and has had no releases in the last 12 months.
The artifact includes a license file and the repository also has one, so this is not a licensing-absence gap. However, the manifest declares GPL-3.0 while the detected license is LGPL-3.0, requiring clarification.
The package has 33 releases since March 2018, but none in the last 12 months and its latest release was on February 23, 2023. This indicates a mature but effectively ended release line.
There were zero commits and zero active maintainers in the three months measured. Combined with the explicit final-release note, this points to an inactive maintenance line.
The repository has eight open issues but no new or closed issues and no pull requests in the measured month. This shows unresolved maintenance demand without evidence of current triage.
Composer is used for the build, but no security-scanning tools were detected. The missing scanning is a hygiene gap and does not by itself make the release unfit.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version ^5 || ^6 || ^7 || ^8 || ^9 | — | — |
symfony/console Version ^3 || ^4.0 | — | — |
fzaninotto/faker Version dev-master | — | — |
guzzlehttp/guzzle Version ^6.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.