The package has a clear README, MIT declaration, small dependency set, and no install-time scripts. The project has one registry maintainer and no security policy, limiting visible continuity and security reporting.
58%
Total Score
50
100
88
75
Only one account has registry publish access, and the repository owner is an individual rather than an organization. This leaves limited visible publishing continuity if that maintainer becomes inactive.
The latest release was about 5 years ago, with no releases in the last 12 months. That is a meaningful maintenance concern despite the package having 10 releases overall.
The project uses Composer, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than a severe risk.
No repository security policy was found, so users have no documented channel or process for reporting vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hanson/foundation-sdk Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.