Shipping Library
38%
Total Score
25
70
67
This is the package's only release, published about 2 years and 8 months ago, with no releases in the last 12 months. That strongly indicates abandonment risk.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and weakening confidence in maintenance.
One registry maintainer is a thin support base for a package that has no recent release or commit activity. The linked repository is user-owned, so there is no organization backing to offset this.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is not evidence of a security defect by itself.
The assessed version is still v0.1.0-alpha, and all recent releases are prereleases. This indicates an immature API and adds uncertainty for dependents.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jms/serializer Version ^3.29 | — | — |
vasildakov/econt Version dev-main | — | — |
vlucas/phpdotenv Version ^5.6 | — | — |
vasildakov/speedy Version ^1.0@alpha | — | — |
selective/transformer Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.