The package includes tests and a README, and it has no install-time scripts or registry deprecation. Its sole maintainer, zero recent commits, and explicit fork warning make long-term support and production use doubtful.
35%
Total Score
25
100
56
67
Only four releases were published, with none in the last 12 months; the latest release was in January 2020. This indicates prolonged abandonment risk despite the package not being formally deprecated.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the last push being in 2020, this is strong evidence that maintenance has stopped.
Only one registry account has publishing access. This is a thin publishing base and increases continuity risk for a package whose repository also shows no recent activity.
The artifact includes a README and tests, which provide useful consumer and maintenance coverage. However, the README explicitly says this fork contains untested features and is not ready for real use, materially weakening that positive evidence.
The repository has no stars or forks and only one watcher. Popularity is not decisive for a small package, but these values provide no supporting evidence of broad adoption or community backing.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
defuse/php-encryption Version 2.0.x | — | — |
silverstripe/framework Version >=3.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.