Variance analysis, trend analysis, and significance evaluation for financial accounts
58%
Total Score
50
100
75
88
The registry namespace and repository owner match, providing consistent ownership evidence. The owner is an individual account rather than an organization, so the single maintainer account remains a modest continuity concern.
The package is 135 days old but has only one release, so there is little evidence of sustained release maintenance or compatibility history.
There were zero commits and zero active maintainers in the last three months. With only one release, this is meaningful evidence that maintenance has not yet been demonstrated.
The repository has zero stars, forks, and watchers. This is weak supporting evidence for maturity, but popularity alone is not required for a small package to be healthy.
Composer is used as the build tool, but no security scanning tools were detected. The absence of scanning is a transparency gap, though it is not by itself evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
azaharizaman/nexus-common Version dev-main | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.