The project has a single publisher, no security policy, and all six workflow actions are unpinned. It does provide tests, release notes, a license, and a recent release.
64%
Total Score
50
80
75
Registry publishing is controlled by one person. That is a limited bus factor for a user-owned project, although the repository and package are consistently associated with that owner.
The package is about 699 days old with five releases, but only one release in the last 12 months; activity is relatively sparse despite a recent latest release.
The repository recorded zero commits and zero active maintainers in the last three months; the recent release partly offsets this, but ongoing maintenance is not demonstrated.
No security policy was found in the repository, leaving vulnerability-reporting and response expectations undocumented.
Version 0.4.0 is not a stable-major release, so the API may still change incompatibly even though it is not marked prerelease.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
brokeyourbike/http-enums Version ^2.0 | — | — |
brokeyourbike/http-client Version ^1.0 | — | — |
brokeyourbike/resolve-uri Version ^1.0 | — | — |
brokeyourbike/has-source-model Version ^3.0 | — | — |
brokeyourbike/data-transfer-object Version ^0.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.