The published artifact is well documented, tested, and licensed, with no install-time scripts. Its dependencies are explicit, but the project is still early-stage and source visibility could not be verified.
63%
Total Score
50
100
80
100
Only one registry maintainer is listed, which limits visible continuity if that person becomes unavailable; the active release history provides some compensation but not long-term assurance.
The package is only 51 days old, despite seven releases in that period; this shows active initial work but provides limited evidence of long-term maintenance.
Version v0.5.0 is a pre-1.0 release, so its API and behavior may still change even though it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
adachsoft/gitlib Version ^4.0 | — | — |
adachsoft/collection Version ^3.0 | — | — |
adachsoft/changelog-linter Version ^0.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.