The dependency footprint is small, and the repository matches the package with a usable README. Workflow hygiene is imperfect, but the audit is complete and its cache finding is low confidence.
44%
Total Score
50
100
72
67
No license declaration or license file was found in the package or repository, leaving the legal terms for adoption unclear.
There were no commits and no active maintainers during the last three months, a significant maintenance concern despite the recent registry release.
The registry namespace and repository are owned by the same individual account, providing direct ownership alignment but no organizational backing.
The repository has only 2 stars, 1 fork, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of a broad user or contributor base.
The project uses Make and Composer build tooling, but no security scanning tools were detected, leaving a modest security-process gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
spiral/goridge Version ^4.2 | — | — |
spiral/roadrunner-worker Version ^3.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.