The package is licensed, documented, actively released, and backed by an organization with build and security tooling. Recent repository work is concentrated in one contributor, and the repository does not identify or mention this package, which warrants checking the source mapping before adoption.
67%
Total Score
67
100
94
50
All 2 recent commits came from one contributor, leaving maintenance dependent on a single active individual despite organization ownership.
The repository recorded 2 commits in the last 3 months, showing some continued maintenance, though the volume is modest.
The repository name does not match this package and its README does not mention the package, so the source mapping may be incorrect or the package may be piggy-backing on another project.
No repository security policy was found, reducing transparency for vulnerability reporting; the presence of GitGuardian provides partial but not equivalent compensation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nette/di Version ^2.4|^3.0 | — | — |
nette/schema Version ^1.2 | — | — |
adt/background-queue Version ^5.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.