The package has a license, a matching repository, and no install-time scripts. Its tiny project has little activity or security process, so future fixes and compatibility work are uncertain.
43%
Total Score
38
100
72
75
The latest release was about seven years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk despite the package having four historical releases.
There were no commits and no active maintainers in the last three months. This directly supports a meaningful risk of stalled fixes and compatibility work.
One registry maintainer indicates a thin publishing base. This is a modest resilience concern for a user-owned project without organizational backing.
The repository is owned by an individual user rather than an organization, so the single-maintainer and limited-activity concerns are not offset by visible organizational backing.
Two issues and one pull request remain open, with no issues or pull requests closed in the last month. This suggests limited recent project responsiveness.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ezyang/htmlpurifier Version ^4.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.