The MIT license, README, tests, and release notes make the package easy to evaluate. No commits were recorded in the last 3 months, and the repository has no security policy. The abandonment status makes this a poor dependency choice.
22%
Total Score
75
75
50
Packagist marks the entire package as abandoned, with no meaningful replacement identified. This is a severe dependency-health warning even though the repository is not archived.
The package has a long history and 26 releases, but it has had no release in the last 12 months; version 3.4.1 was published about 1 year 4 months ago. That weakens confidence in ongoing maintenance.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. This is consistent with a project whose maintenance has stalled, despite a relatively recent last push elsewhere in the available evidence.
The repository has no security policy. For a package that executes queued application tasks, this is a real transparency and vulnerability-reporting gap, though it is less severe than the abandonment status.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
neos/flow Version ^6.3 || ^7.0 || ^8.0 || ^9.0 | — | — |
neos/cache Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.