It has a clear MIT license, README, tests, and no install-time scripts. Its young, fast-moving release history and three runtime dependencies add uncertainty, while source maintenance cannot be verified because the repository could not be found.
18%
Total Score
50
60
100
Packagist marks the entire package as abandoned, with no replacement named. This is a severe dependency-maintenance risk even though the artifact itself has useful documentation and tests.
The package declares three runtime dependencies, including the PHP runtime and two TentaPress components. The profile is not excessive, but reliance on related packages increases coupling for a young package.
The package is young at about 232 days old but has 21 releases, including all 21 in the last 12 months, with a median interval of about 20 hours. This suggests active iteration but limited maturity.
The current version is v0.6.2, so the package has not reached a stable major release. It is not marked prerelease, which partly offsets the uncertainty but does not remove compatibility risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tentapress/system Version <1.0 | — | — |
tentapress/admin-shell Version <1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.