This release is usable and reasonably transparent: it has a clear MIT license, a substantial source tree with tests, no install-time lifecycle scripts, a matching public repository, and a recent release and repository update. The main concerns are maintenance concentration and limited recent activity: all three commits in the last three months came from one contributor, only one release was published in the last 12 months, and the repository lacks a security policy and explicit workflow token permissions. These issues warrant caution for a dependency, but the package is not deprecated or archived and shows current maintenance evidence.
68%
Total Score
63
100
78
80
The repository is owned by an individual user rather than an organization, so there is no organizational backing to compensate for the concentrated contributor base.
The package has existed for about 3 years and has 23 releases, with a latest release on September 4, 2026; however, only one release occurred in the last 12 months, indicating a slower recent release cadence.
One contributor made all three commits in the last three months, yielding a 100% top-contributor share and a clear single-maintainer continuity risk.
The repository recorded three commits in the last three months and was recently updated, demonstrating ongoing activity, but the volume is modest for a production dependency.
The repository has only 2 stars, 0 forks, and 1 watcher. Low popularity is not decisive, but it provides little external evidence of broad adoption or community support.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1|^2|^3 | — | — |
nytris/nytris Version ^0.1 | — | — |
php-amqplib/php-amqplib Version v3.7.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.