A notification package for Tonka
62%
Total Score
caution
Usable with caveats: this brand-new release has no demonstrated maintenance history and only minimal documentation.
The package includes a README and release notes for this version, but the README is only 14 characters and the repository has no tests or changelog. Missing tests and changelog are normal for published artifacts; the extremely limited consumer documentation remains a small concern.
This is the package's first release, published less than a day ago, so there is no release history yet to demonstrate sustained maintenance. Its newness limits confidence but does not by itself indicate abandonment.
The repository has recorded no commits in the last three months and no active maintainers during that period. Because the package is newly released, this is limited evidence of ongoing maintenance rather than strong abandonment evidence.
Composer is used for builds, which fits the package, but no security-scanning tool was detected. That leaves a modest transparency and assurance gap.
The linked repository has no security policy, so users have no documented process for reporting vulnerabilities. This is a hygiene gap, not evidence that the release is unsafe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.