This is a usable and reasonably transparent package with a six-year release history, a stable current version, an active non-archived organization-owned repository, a matching package repository, a license file, and no install-time lifecycle scripts or dangerous workflow patterns. The main concerns are very limited recent activity—one commit by one contributor in the last three months—along with only one registry maintainer, no tests or changelog in either the artifact or repository, low repository adoption, absent security scanning, and workflows without top-level token permissions. Organization backing and a recent release partly offset the single-contributor risk, but the package merits caution rather than an unqualified recommendation.
70%
Total Score
60
100
78
90
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nette/di Version ^3.0 | — | — |
nette/utils Version ^3.0 || ^4.0 | — | — |
nette/security Version ^3.0 | — | — |
baraja-core/url Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.