Retrieves repo information on your favourite Git repository hosting service
39%
Total Score
0
78
75
The package has had only three releases, all concentrated in November 2017, and no release in nearly nine years. This is strong evidence of abandonment for a library dependency.
The repository has recorded zero commits and zero active maintainers in the last three months, with its last push in November 2017. The long inactivity materially raises abandonment risk.
The repository has zero stars and forks and only one watcher, providing little evidence of active community use or shared maintenance capacity.
Composer is used for the build, which is appropriate, but no security scanning tools are present. This is a transparency and maintenance gap, though not evidence of a specific vulnerability.
The repository has no security policy. For a package that handles repository-service information, this reduces transparency around vulnerability reporting and maintenance response.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
seld/jsonlint Version ^1.6 | — | — |
guzzlehttp/guzzle Version ^6.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.