usox/harm
The stable version, MIT licensing, tests, and clear package match provide useful transparency. Those positives cannot offset the project’s abandoned and withdrawn status.
10%
Total Score
33
100
56
83
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe dependency risk because the package is explicitly withdrawn from active use.
The package has 28 releases, but its latest release was over seven years ago and it had no releases in the last 12 months. The historical cadence does not compensate for the prolonged inactivity.
There were no commits and no active maintainers in the past three months. Together with the archived repository, this confirms a lack of current maintenance.
The linked repository is archived, and its last push was over seven years ago. This strongly indicates that maintenance and issue resolution have ended.
The repository is owned by a personal user account rather than an organization, so there is no visible organizational maintenance buffer. This adds context to the inactivity but is not severe by itself.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Daniel Jakob |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 hhvm/hsl Version ^4.0 | — | — |
facebook/hack-codegen Version ^4.2 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.