This is a mature, stable, actively published package with a correctly matched repository, clear documentation, an included license, no deprecation, and no install-time lifecycle scripts. However, maintenance momentum is currently thin: only one release occurred in the last 12 months, repository activity shows one commit from one contributor in the last three months, and the artifact and repository contain neither tests nor a changelog. The organization-owned repository and security policy provide some backing, while workflow analysis found no dangerous patterns, but absent security scanning and undeclared workflow token permissions leave hygiene gaps. Suitable for use with normal dependency monitoring, but not as a low-risk, heavily relied-on foundation without additional validation.
68%
Total Score
60
50
78
90
Twelve runtime dependencies, including several framework and Baraja components, create a meaningful dependency surface. The profile is coherent for a Nette-integrated API framework, but it increases transitive maintenance exposure.
Only one registry account has publish access, which is a concentration risk, though the repository is owned by an organization that can provide some operational backing.
The package has a substantial README, but neither the artifact nor repository contains tests or a changelog. GitHub Releases provide some release transparency, but the lack of tests is still a maintenance and regression risk.
The project has existed for about 6 years 8 months with 70 releases, but only one release in the last 12 months indicates substantially slower recent publishing than its historical cadence.
All recent commits come from one contributor, creating a low short-term bus factor. Organization ownership provides some ability to transfer maintenance, but no second active contributor is evidenced.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nette/di Version ^3.0 | — | — |
nette/http Version ^3.1 | — | — |
nette/caching Version ^3.1 | — | — |
baraja-core/url Version ^1.1 | — | — |
nette/application Version ^3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.