The package has a clear README, changelog, repository tests, and matching MIT licensing. Its lone 0.0.1 release and no recent commits leave maintenance uncertain, while all four workflow actions are unpinned.
58%
Total Score
50
81
75
This release is the package's only release, published 397 days ago, with no releases in the last 12 months. That provides little evidence of sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with the single-release history, this is meaningful evidence of inactive maintenance.
The repository has zero stars, forks, and watchers. Popularity is supporting evidence rather than a verdict, but these counts provide no visible community support for a package already showing limited activity.
The repository has no security policy. This is a transparency and disclosure gap, though it is less significant than the inactive release and commit history.
The latest version is 0.0.1 and is not a stable major release, so compatibility and maturity remain uncertain despite it not being marked as a prerelease.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0 || ^2.0 || ^3.0 | — | — |
symfony/cache Version ^5.4 || ^6.0 || ^7.0 | — | — |
symfony/process Version ^5.4 || ^6.0 || ^7.0 | — | — |
evenement/evenement Version ^3.0 | — | — |
spatie/temporary-directory Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.