The stable version and clean install behavior are positives. Documentation and repository linkage are thin, while the project lacks security tooling.
30%
Total Score
0
67
75
The latest release was published in November 2014, with no releases in the last 12 months; this is strong evidence that the package is no longer maintained.
There were no commits and no active maintainers in the last three months, consistent with a project that has been abandoned for years.
The repository name does not exactly match the package name and its README does not mention the package, making the package-to-source relationship less transparent.
Composer is used for builds, but no security-scanning tooling is present; this is a modest transparency and maintenance gap.
The repository has no published security policy, leaving maintainers' vulnerability-reporting process unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nass600/get-id3 Version dev-master | — | — |
components/jquery Version 1.* | — | — |
happyworm/jplayer Version v2.7.1 | — | — |
components/jqueryui Version 1.11.* | — | — |
liip/imagine-bundle Version 1.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.