The clear license, readable documentation, and exact-version release notes provide useful transparency. However, the project has had no recorded activity for nearly four years, and its own documentation says the API is not production-ready.
38%
Total Score
50
100
67
75
The latest release was in October 2022, with no releases in the last 12 months; this strongly indicates abandonment risk despite three releases arriving close together initially.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and limited evidence of ongoing maintenance.
The package includes a substantial README and release notes for version 0.0.3, which improve transparency. The README explicitly says the API is not ready for production, while missing tests and a changelog in the artifact are normal packaging practice.
The repository has zero stars, forks, and watchers, providing no supporting evidence of broad community use or review. Popularity is only supporting evidence, so this is a secondary concern.
Composer is used for the build, showing basic ecosystem-appropriate project tooling. No security scanning tools are present, which is a minor hygiene limitation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tanglephp/core Version * | — | — |
tanglephp/network Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.