The repository is a very small project with no tests, changelog, or README, which leaves consumers with limited evidence about usage and maintenance. MIT licensing and no install-time scripts reduce adoption risk, but the alpha release status and inactivity make this a dependency to approach cautiously.
54%
Total Score
50
75
100
The package has no README, tests, or changelog, leaving consumers without basic usage guidance or release documentation. The repository's planning documents provide some context but do not fully compensate for the missing consumer documentation.
Only one release exists over the package's 140-day lifetime, so there is little release history to demonstrate sustained maintenance or compatibility discipline.
There were zero commits and zero active maintainers in the last 3 months, despite the package being 140 days old; this weakens evidence of ongoing maintenance.
The assessed version is v0.1.0-alpha1 and all recent releases are prereleases, indicating an immature API with elevated change risk for dependents.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
psr/event-dispatcher Version ^3.0 | — | — |
azaharizaman/nexus-common Version dev-main | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.