Usable with caveats: this is a young alpha release with only one release and no repository commits in the last three months. Strong documentation, tests, licensing, and a matching source repository provide useful evidence of a real project, but maintenance maturity is not yet established.
55%
Total Score
50
79
88
The package is 135 days old and has only one release, so there is little release history from which to judge long-term maintenance. This is a meaningful maturity concern for an enterprise document-management library.
The repository recorded zero commits and zero active maintainers during the last three months, despite the package being intended as a substantial engine. This weakens evidence of ongoing maintenance.
Composer build tooling is present, but no security-scanning tools were detected. This is a modest process gap, though the absence of workflows also limits the practical impact of missing automation.
The repository has no security policy. For a package handling document storage, access control, and retention, the absence of a stated vulnerability-reporting process is a transparency gap.
The assessed version is v0.1.0-alpha1, and all recent releases are prereleases. That is expected for an early project but indicates the API and behavior may still change substantially.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
symfony/uid Version ^7.0 | — | — |
azaharizaman/nexus-crypto Version dev-main | — | — |
azaharizaman/nexus-tenant Version dev-main | — | — |
azaharizaman/nexus-storage Version dev-main | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.