The small, focused codebase has clear documentation and matching source, but provides little evidence of ongoing maintenance. Its MIT license and lack of install scripts reduce adoption friction.
58%
Total Score
50
80
75
The package is about 140 days old and has only one release, so there is little release history to demonstrate sustained maintenance.
The repository recorded no commits or active maintainers in the last three months, and its last push was about four months ago; this weakens evidence of ongoing maintenance.
The repository has no security policy, leaving vulnerability reporting and response expectations unspecified; this is a transparency gap for a package used in applications.
The assessed version is v0.1.0-alpha1 and all recent releases are prereleases, indicating an immature API and higher compatibility risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
illuminate/support Version ^11.0|^12.0 | — | — |
illuminate/database Version ^11.0|^12.0 | — | — |
azaharizaman/nexus-tenant Version dev-main | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.