This release is usable but carries meaningful maintenance and transparency concerns. It has a stable, non-deprecated version, an organization-backed repository, a current release, a documented README and changelog, and no install-time scripts or dangerous workflows. However, the repository shows zero commits and zero active maintainers in the last 3 months, has no tests or security policy, and the linked repository neither matches the package name nor mentions the package in its README, creating uncertainty about repository ownership and ongoing support. The package is therefore a reasonable dependency only if its maintenance expectations and proprietary licensing fit the project, with adoption risk higher than for a well-tested, actively developed module.
62%
Total Score
50
100
72
90
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
konduto/sdk Version v2.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.