This is a mature, stable package with a long release history, a current release, an unarchived organization-backed repository, clear licensing, repository tests, and no deprecation or dangerous workflow findings. The main concern is that the repository recorded no commits or active maintainers in the last 3 months despite the recent release, alongside modestly quiet issue activity and absent security-scanning tooling; these warrant monitoring but do not currently outweigh the package's established maintenance and transparency evidence.
78%
Total Score
67
50
94
88
The package declares 10 runtime dependencies, including several framework components. This is a meaningful dependency surface to maintain, but it is coherent with the package's translation and framework integration role rather than inherently excessive.
There were 0 commits and 0 active maintainers in the last 3 months. Although the package has a recent release and the repository was recently pushed, the absence of recent commit activity is a maintenance warning.
The repository has only 4 open issues and 5 open pull requests; one issue was closed in the last month, but no new issues or pull requests were merged in that period. This suggests currently quiet rather than clearly abandoned issue handling.
The repository uses Make and Composer, but no security-scanning tools were detected. The missing scanning coverage is a hygiene gap, not evidence that the package is unsafe or unmaintained.
The only workflow lacks top-level token permissions. No write permissions were observed, but explicitly constraining permissions would provide stronger workflow hardening.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nette/di Version ^3.0.6 | — | — |
nette/http Version ^3.0.7 | — | — |
nette/neon Version ^3.3.1 | — | — |
latte/latte Version ^2.6|^3.0.25 | — | — |
nette/utils Version ^3.2.1|^4.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.