H5P Core functionality in PHP
42%
Total Score
unhealthy
Risky: releases stopped years ago, source activity is absent, and the repository does not clearly identify this package.
The package is 1651 days old with 22 releases but no releases in the last 12 months; this indicates a long period without registry maintenance.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with an inactive project and elevated abandonment risk.
The repository name does not match the package name and its README does not mention the package, leaving the connection between the published artifact and source repository unclear.
Composer is used for the build, but no security-scanning tools are present; this is a modest supply-chain hygiene gap rather than evidence of abandonment by itself.
The linked repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.