The repository matches the package, has a README, and is backed by an organization rather than an ambiguous source. The release is stable and not deprecated, but the overall project evidence remains sparse.
58%
Total Score
50
80
50
The release declares a proprietary license and has no license file. It is legally declared, but the restriction can limit redistribution and makes adoption less flexible.
The package defines a post-update-cmd lifecycle script, which runs code during dependency updates. This is narrower than an install script but still adds execution behavior to package management.
The package has four releases over 414 days, with only one release in the last 12 months. The latest release is recent, but the overall cadence provides limited evidence of sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. A recent release partly offsets this, but current development activity is still unclear.
The linked repository has no security policy. For a small package this is a modest transparency gap rather than evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
esoftdream/waone Version ^2.0 | — | — |
codeigniter4/framework Version ^4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.