Healthy and suitable to use, with minor transparency and resilience caveats. It has frequent releases, current repository activity, tests, and a modest dependency set, but the project is small, lightly used, and lacks a README and security policy.
82%
Total Score
70
100
78
90
Only one registry account has publish access, which creates publishing continuity risk. Recent repository activity from another contributor provides some maintenance evidence but does not remove the single-publisher concentration.
Tests are present both in the package and repository, which supports maintainability. The lack of a README and changelog reduces documentation and release transparency, but this is a very small seven-file package.
The repository is owned by an individual rather than an organization, so there is no organizational handoff capacity to offset the small maintainer base.
Two contributors were active recently, but one produced about 78% of commits, leaving maintenance concentrated around the primary contributor.
The repository has zero stars and forks and only one watcher, indicating limited external adoption. Popularity is supporting evidence rather than a decisive health measure, so this is a minor concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
draw/contracts Version ^0.43 | — | — |
symfony/process Version ^7.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.