The repository is not archived and includes tests, a changelog, and security scanning. Maintenance is the main concern: no registry releases in nearly five years and no commits in the last three months, while workflow references remain unpinned.
62%
Total Score
50
94
75
The package and repository are owned by the same individual account, so ownership is consistent, but there is no organizational backing shown to broaden maintenance capacity.
The package has had no release in nearly five years, despite a nine-release history and a previously regular median interval of about 221 days. That is a substantial freshness and maintenance concern.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest registry release, this lowers confidence in ongoing maintenance.
There has been no issue or pull-request activity in the last month, with one open issue and four open pull requests. This suggests limited current responsiveness, though it is not evidence of abandonment by itself.
No repository security policy was found, leaving vulnerability-reporting expectations and maintainer response guidance unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
voku/email-check Version ~3.1 | — | — |
respect/validation Version ~2.2 | — | — |
voku/portable-utf8 Version ~6.0 | — | — |
voku/simple_html_dom Version ~4.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.