The source repository remains intact, identified with the package, and includes tests, documentation, and an MIT license. Those strengths do not offset the package withdrawal and its lack of releases since January 2020.
22%
Total Score
83
100
61
88
Packagist marks the entire package as abandoned. Although the listed replacement is the same package name, the package-level withdrawal is a severe adoption risk.
The package has had six releases since September 2018, but none in the last 12 months and the latest was in January 2020, indicating more than six years without a registry release.
There were no commits and no active maintainers in the three months measured, which weakens evidence of current maintenance even though the repository was pushed in April 2024.
The repository has zero stars and forks and one watcher, offering little supporting evidence of community adoption, though popularity is not decisive for a small package.
Composer is used as the build tool, but no security-scanning tool was detected. The missing scanner is a hygiene gap rather than a standalone reason to reject the package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tomk79/request Version ^1.0 | — | — |
tomk79/filesystem Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.