The focused codebase and clear README make the package understandable to integrate. Its single alpha release, no recent commits, and absent tests leave maintenance and reliability uncertain. Pin this exact version and validate financial outputs before adoption.
57%
Total Score
50
100
69
75
The repository recorded zero commits and zero active maintainers during the last three months. For a young alpha package, that is a meaningful maintenance concern.
The package includes a substantial README, but neither the artifact nor repository has tests or a changelog. Missing tests matter for a financial-statement library because correctness is central, while the absent changelog is normal for a first release.
Only one release exists over 138 days, so there is little evidence of sustained release maintenance or maturity.
The repository has no stars, forks, or watchers. This is weak supporting evidence rather than a verdict, but it provides no external maturity signal.
Composer build tooling is present, but no security scanning tools were detected. The missing scanner is a hygiene gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
azaharizaman/nexus-common Version dev-main | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.