The package is small, licensed, tested, and has a clear source tree. Its sole maintainer and absent security policy provide limited evidence of ongoing support.
52%
Total Score
67
100
88
83
Only one registry maintainer is listed. That is not inherently unhealthy for an individual-owned project, but it leaves limited visible publishing capacity when combined with long-term inactivity.
There have been no releases in the last 12 months, and the latest release was on March 15, 2018. This is a substantial maintenance gap, even for a small utility.
There were zero commits and zero active maintainers in the last three months, consistent with the last repository push in March 2018 and increasing abandonment risk.
Composer is used for the build, but no security scanning tool is present. The build setup is appropriate, while the missing scanning adds a minor transparency gap.
The repository has no security policy. For a small debugging utility this is a limited concern, but it reduces guidance for reporting and handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mustache/mustache Version ^2.12 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.