This is a well-structured, actively published release from an organization-backed repository, with a stable 1.3.0 version, recent repository activity, a matching source repository, an MIT license, changelog coverage, and repository tests that compensate for tests omitted from the artifact. The package is still relatively young at 145 days and has modest activity and no recorded popularity, while the repository lacks security scanning, a security policy, and explicit top-level workflow permissions. These are meaningful hygiene and maturity cautions, but there is no evidence of deprecation, archival, dangerous workflows, or abandoned maintenance, so the package appears reasonable to depend on with normal monitoring.
78%
Total Score
88
100
83
80
The package is young at 145 days with five releases, four in the last 12 months, and a median interval of about 42 days. This demonstrates ongoing publication but gives limited long-term maturity evidence.
There were no new or closed issues or pull requests in the last month, and issue totals are unavailable. This provides little evidence about community support, but does not by itself show abandonment.
The repository has zero stars, forks, and watchers. This limits external validation, although popularity is only supporting evidence and the package has other positive maintenance signals.
The repository uses Make and Composer build tooling, but no security scanning tools were detected. The build setup is positive while the missing security automation is a hygiene gap.
No repository security policy was found, reducing transparency about vulnerability reporting and response procedures.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
async-aws/core Version ^1.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.