A skeleton repository for my packages
58%
Total Score
caution
Usable with caveats: no releases or commits since November 2024, so ongoing maintenance is uncertain.
The registry namespace and repository owner match a named individual, which is consistent with the package's ownership rather than an unexplained or mismatched source. The single-person backing provides less continuity than organizational ownership.
The package has only three releases, all published within a short period on November 5, 2024, followed by no release in roughly 23 months. That limited and inactive history lowers confidence in continued maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with no activity since November 2024. For a package intended as a reusable skeleton, that is a meaningful maintenance concern.
The repository has no stars or forks and one watcher. Popularity is only supporting evidence, but these numbers provide little external evidence of adoption or a broad maintainer community.
Composer build tooling is present, but no security scanning tooling was detected. This is a modest transparency and maintenance gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.