The repository directly matches the package, and its small four-file tree is easy to inspect. It has no install scripts or workflow findings, though no security policy is present.
45%
Total Score
0
64
75
This package has only one release, published over six years ago, with none in the last 12 months. That strongly suggests it is inactive and increases abandonment risk.
There were no commits and no active maintainers in the last three months. Combined with the old release history, this is strong evidence of weak ongoing maintenance.
The repository has zero stars and one fork. Popularity is only supporting evidence, but these low counts provide little evidence of a mature or widely supported project.
Composer is used as a build tool, which fits the package ecosystem, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.
No repository security policy was found. For a small package this is a hygiene gap, but it does not by itself establish that the release is unsafe to depend on.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phalcon/incubator Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.