Stable versioning and a non-deprecated registry listing are positives, but six runtime dependencies and one publisher provide limited support visibility. The repository could not be found, so current maintenance and provenance cannot be verified.
42%
Total Score
50
50
67
The latest release was about six years ago, with no releases in the last 12 months; this is strong evidence of stalled maintenance despite four historical releases.
Six runtime dependencies increase the package's maintenance and transitive-dependency surface, although the signal does not show that any dependency is itself problematic.
Only one registry publisher account is listed, leaving a thin apparent publishing base; this is weaker evidence than observed contributor activity but still limits resilience if that account becomes inactive.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
xltxlm/str Version @dev | — | — |
xltxlm/url Version @dev | — | — |
xltxlm/fileinfo Version @dev | — | — |
xltxlm/classinfo Version @dev | — | — |
gkralik/php-uglifyjs Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.