The package has no recent maintenance evidence and no tests or changelog. Its MIT license, matching repository, and lack of install scripts reduce adoption friction, but do not offset the age.
38%
Total Score
50
100
63
83
This is the only release, published in August 2016, with no releases in the last 12 months. That long period without updates is strong evidence of abandonment risk.
The package has no README, tests, changelog, or release notes. Missing tests and changelog are normal in a published artifact, but the absent README makes this small server harder to evaluate and use.
The repository is owned by the same individual namespace as the package, with no organization backing indicated. This is consistent ownership but offers limited evidence of maintenance capacity.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these counts provide no external sign of active adoption.
Composer is used for the build, but no security scanning tools are configured. This is a modest transparency gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
react/socket Version ~0.4 | — | — |
symfony/console Version >=2.3 | — | — |
svengerlach/flake Version ^0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.