The four-file artifact is easy to inspect, and installation has no lifecycle scripts. The stable version and MIT declaration help, but there is no current maintenance or security process to support a new integration.
8%
Total Score
25
50
75
Packagist marks the entire package as abandoned, with no replacement specified. Package-level abandonment is a severe adoption risk rather than a warning limited to this release.
Only two releases exist, and none were published in the last 12 months; the latest release was over 13 years ago. This indicates a long-abandoned release line.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the archived status and providing no evidence of ongoing maintenance.
The linked repository is archived, and its last push was in April 2013. An archived source project is a strong indicator that maintenance and issue response have ended.
The repository is owned by an organization, which provides some historical project backing, but it does not compensate for the repository being archived and the package being abandoned.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.