The project is licensed, documented, and backed by a matching organization repository with tests and release notes. Its small audience, absent security policy, and unpinned workflow references add ongoing maintenance and build-reproducibility concerns.
61%
Total Score
67
50
75
83
Seven runtime dependencies create a meaningful transitive maintenance surface for a small package, though the listed dependencies are consistent with its framework role and no extreme dependency burden is shown.
The package has 31 releases over roughly four and a half years, but none in the last 12 months; the long release gap lowers confidence in current maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with no registry releases in the last year, this is a material maintenance concern.
There are no open issues or pull requests and no activity in the last month. The clean tracker is positive, but the absence of recent interaction provides little evidence of active maintenance.
The repository has zero stars and forks and only two watchers. This indicates limited external adoption, but popularity is supporting evidence rather than a health verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
decodelabs/tagged Version ^0.21 | — | — |
decodelabs/monarch Version ^0.2.1 | — | — |
decodelabs/coercion Version ^0.3.5 | — | — |
decodelabs/archetype Version ^0.4 | — | — |
decodelabs/exceptional Version ^0.6.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.