The package has clear documentation, licensing, release notes, and a security policy. Its dependency base is small and the source is backed by an organization, but its maintenance record is too new to establish long-term stability.
68%
Total Score
67
100
83
88
This is the first registry release, published less than a day ago, so there is no release cadence or history demonstrating sustained maintenance.
All observed recent commits come from one contributor. Organizational backing partly compensates for this concentration, but the public maintenance record remains thin.
Only one commit from one active maintainer was observed in the last three months; for a package released less than a day ago this is limited evidence, not proof of abandonment.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than a standalone severe concern.
Version 0.1.0 is an initial stable-form release rather than a prerelease, but its early version and absent history provide little evidence of maturity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
automattic/jetpack-premium-analytics Version ^0.9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.