The package includes tests, a clear license, and Composer tooling. Its only release is 158 days old, with no commits or active maintainers in the last three months, so pinning this version carries maintenance risk.
60%
Total Score
50
94
75
This package has only one release, published 158 days ago, which provides little evidence of an established release track or ongoing maintenance.
There were zero commits and zero active maintainers in the last three months, a concrete sign that maintenance may have stalled after the initial release.
No repository security policy was found, leaving vulnerability reporting and response expectations undocumented; this is a transparency gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sabre/vobject Version ~4.5.1 | — | — |
roundcube/plugin-installer Version >=0.1.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.