The package is licensed, documented, tested, and has no install-time scripts. Its single-maintainer base and absent security policy provide little ongoing support for a bot integration that has not evolved.
42%
Total Score
25
75
75
The last release was published on May 19, 2017, with no releases in the past 12 months; about 9 years without a release is a strong abandonment concern.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and indicating no observed current maintenance.
Only one registry maintainer is listed. While the repository is owned by the same individual, there is no broader observed maintainer base to reduce continuity risk.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, particularly relevant to a package that handles bot API credentials and messages.
Version 0.0.22 is not a stable-major release, so compatibility guarantees are limited; the absence of recent releases makes that maturity gap more significant.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.