It has a matching source repository, a clear MIT license, and no install scripts. The single-user project and weak workflow and security hygiene add maintenance risk.
55%
Total Score
38
50
81
75
The repository recorded zero commits and zero active maintainers in the last three months. For a package only about three months old, that is a meaningful abandonment warning.
The package declares 88 runtime dependencies and no development dependencies, including many infrastructure and cloud SDK packages. This creates a broad upgrade and transitive-maintenance burden for consumers.
Only one registry publishing maintainer, asiasea-ai, is listed. The repository owner is a user account rather than an organization, so there is little visible publishing redundancy.
The registry namespace and repository owner match, but the owner type is User rather than Organization. This supports package identity while offering limited evidence of institutional backing.
There are no open issues or pull requests and no activity in the last month. This provides little evidence of community maintenance, though it may also reflect the project's small age and user base.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ~3.0.2 | — | — |
flc/dysms Version ~1.0.3 | — | — |
hyperf/amqp Version ~3.2.0 | — | — |
symfony/uid Version ~8.1.0 | — | — |
hyperf/cache Version ~3.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.