Usable with caveats: the package is licensed, clearly backed by its matching repository, and has a stable release with a useful README. However, the latest release was about seven years ago and recent repository activity is absent, so ongoing maintenance should not be assumed.
58%
Total Score
50
100
83
90
There were zero commits and zero active maintainers in the last three months, a direct sign that current development and review capacity are absent.
The package has nine releases but no release in the last 12 months; its latest release was about seven years ago. This is a meaningful maintenance and compatibility concern for a dependency.
Only two issues are open, with no new or closed issues and no pull requests in the last month. This is consistent with a quiet project and offers no evidence of active support.
Composer build tooling is present, but no security scanning tools are configured. For this small, old package that is a transparency gap rather than a severe risk.
The repository is not archived, but it was last pushed about six years ago, reinforcing the concern that maintenance may have stopped.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
o2system/curl Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.