This release appears usable and actively maintained, with 19 releases over roughly 9 months, 18 releases in the last 12 months, a regular median release interval of about 8 days, clear MIT licensing, substantial documentation, a complete source tree with unit tests, and no install-time lifecycle scripts or registry deprecation. However, it remains a pre-1.0 package, has eight runtime dependencies, and no linked source repository was declared, limiting transparency and preventing verification of repository-level maintenance, provenance, and contributor activity. It is a reasonable dependency with moderate adoption risk, but should be pinned and reviewed as an evolving package rather than treated as mature infrastructure.
68%
Total Score
50
50
90
100
The package declares eight runtime dependencies and six development dependencies, including several closely related libraries. This is a meaningful dependency surface to maintain and review, though it is not excessive for the documented Composer-tool functionality.
The registry lists one account with publish access. This does not establish actual activity, but it indicates a thin administrative publication base and leaves limited redundancy if that maintainer becomes unavailable.
The latest version is v0.9.1 and is not marked as a prerelease, but the package has not reached a stable 1.x major version. The frequent release history provides some compensation, so this is a maturity caution rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
adachsoft/gitlib Version ^4.0 | — | — |
adachsoft/collection Version ^3.0 | — | — |
adachsoft/ai-tool-call Version ^2.0 | — | — |
adachsoft/composer-lib Version ^0.7 | — | — |
adachsoft/composer-json-fixer Version ^0.2 || ^0.3 || ^0.4 || ^0.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.