The package includes a README, tests, and an MIT license, and it has no install-time scripts. Its beta status and absent recent activity leave no credible maintenance path.
8%
Total Score
0
50
100
Packagist marks the entire package as abandoned, with no replacement package provided. This is a severe adoption risk because the registry itself advises that the package should no longer be used.
The package has only two releases, with the latest published in June 2016 and none in nearly 10 years. This strongly indicates that maintenance has stopped.
The repository had no commits and no active maintainers in the last three months, consistent with its archived status and long period without releases.
The linked repository is archived, and its last push was in February 2017. An archived source project is a severe abandonment risk for a dependency.
The assessed release is v2.0.0-beta, so it is explicitly prerelease rather than a stable release. That adds compatibility risk, especially for a package with no recent maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vegas-cmf/common Version 2.0.* | — | — |
phalcon/incubator Version >=2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.