This is a usable and currently maintained release with a non-archived, correctly matched source repository, a recent release, stable versioning, organizational backing, and no registry deprecation. However, maintenance capacity and transparency are limited: only one contributor was active in the last three months, all recent commits came from that contributor, the package and repository have an extremely minimal README, and neither contains tests or a changelog. The package is therefore reasonable to depend on with normal review, but it has a thin activity and documentation profile that warrants caution for critical systems.
72%
Total Score
70
100
78
90
Only one registry account has publish access. This is a modest operational concentration risk, although the repository is owned by an organization, which provides some backing beyond the registry maintainer list.
The package and repository have a very minimal 8-character README and contain neither tests nor a changelog. GitHub Releases provide some release transparency, but the lack of tests and documentation remains a genuine maintenance and adoption concern.
The package has existed for about 3.9 years and has four releases, including one in the last 12 months and a release on the collection date. The overall release cadence is sparse, but recent publication indicates it is not abandoned.
All one recent commit came from a single contributor, creating a concentrated bus factor. Organization ownership partly compensates because maintenance can potentially be handed off internally, but no second active contributor is shown.
Only one commit was recorded in the last three months, from one active maintainer. The recent activity prevents an abandonment verdict, but the low activity suggests slow maintenance capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nette/utils Version ^3.2 || ^4.0 | — | — |
doctrine/orm Version ^2.9 | — | — |
baraja-core/url Version ^1.1 | — | — |
baraja-core/lock Version ^1.0 | — | — |
baraja-core/network Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.