It also lacks a license and README, making reuse and redistribution less clear. Organization backing and a release note provide limited context, but no evidence of current maintenance or security oversight.
35%
Total Score
75
69
50
The package declares no license, contains no license file, and the repository has no license file. This creates a real legal and adoption concern with no provided evidence compensating for it.
The published artifact has no README, which makes this module harder for consumers to understand, although a GitHub release with notes for version 1.1 provides some release documentation. Missing tests and changelog files are normal for a published artifact and are not concerns here.
The last release was in September 2015, with no releases in the past 12 months and only four releases overall. This strongly raises abandonment risk despite the package not being deprecated.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the release history and indicating no current maintenance.
The repository has zero stars, one fork, and two watchers, providing little supporting evidence of community use or review. Popularity is only supporting evidence, so this reinforces rather than determines the assessment.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
thelia/installer Version ~1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.