vipa/citation-bundle
OJS Advanced Citation Bundle
28%
Total Score
unhealthy
Risky: no releases or commits since 2017, compounded by a license mismatch and repository-package mismatch.
Health Score Breakdown
The package has had only two releases, with the latest in April 2017 and none in the last 12 months. This long period without releases is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push being in 2017. The organization backing does not compensate for absent observed activity.
The manifest declares MIT, but the repository license file was detected as AGPL-3.0. This unresolved mismatch creates meaningful licensing and transparency risk for consumers.
The published artifact has no README, which is a minor consumer-documentation gap, while the repository does contain tests. The repository evidence partly compensates for the missing packaged tests and changelog.
The linked repository name does not match the package name and its README does not mention the package. A monorepo relationship could explain the name difference, but the missing mention leaves package ownership uncertain.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/orm Version ~2.5 | — | — |
symfony/symfony Version ~2.8|~3.0 | — | — |
twig/extensions Version ~1.3 | — | — |
guzzlehttp/guzzle Version ~6.2 | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.