The package is clearly identified, licensed, and documented for its narrow GLFW integration. Its limited project history leaves less evidence of long-term maintenance, so pin this version until the ecosystem matures.
67%
Total Score
83
100
81
75
The package is only 51 days old and has three releases clustered within one day, so there is limited evidence of sustained release maintenance.
Five commits in the last three months show some activity, but the small amount of observed history provides limited evidence of ongoing maintenance.
Composer build tooling is present, but no security-scanning tooling was observed, leaving a modest transparency and maintenance gap.
The repository has no security policy, which makes vulnerability reporting and response expectations less clear for dependents.
Version 0.6.2 is not a prerelease, but the package remains on a pre-1.0 major version, which indicates a less mature compatibility commitment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
fabricate/displays Version ^0.6.0 | — | — |
fabricate/contracts Version ^0.6.0 | — | — |
microscrap/glfw-gfx Version ^0.6.0 | — | — |
fabricate/nuts-and-bolts Version ^0.6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.