A single maintainer and no security policy limit ongoing oversight. The stable version, MIT license, clear README, and small dependency set provide useful baseline transparency.
58%
Total Score
50
100
88
75
Only one registry maintainer is listed, leaving limited publishing continuity if that person becomes unavailable. The linked repository is a matching user-owned project, so this is a real but moderate concern rather than a severe risk.
The latest release was published in September 2021, with no releases in the last 12 months, indicating nearly five years without a new release. The package has nine releases and a stable major version, but the long silence raises maintenance risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and suggesting little current maintenance capacity.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled. This is a hygiene and maintenance gap, not evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hanson/foundation-sdk Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.