The small codebase has clear installation guidance and a stable release. It has no tests, security policy, or automated workflow, so ongoing assurance is limited.
58%
Total Score
50
90
75
A single registry maintainer, Byancode, is consistent with the linked user-owned repository and a small package, but it provides limited redundancy if that maintainer becomes unavailable.
The package has only 2 releases since February 2025, with no releases in the last 12 months and roughly a year since v1.0.1. This is a meaningful maintenance concern for a dependency.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and indicating currently inactive maintenance.
There is 1 open issue and 1 open pull request, with no new or closed issues or pull requests in the last month. The small backlog and absent recent activity add modest abandonment risk.
The repository has no security policy, reducing transparency about how vulnerability reports are handled. This is a hygiene gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
socialiteproviders/manager Version ^4.4 | — | — |
paragonie/constant_time_encoding Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.