Clear README, tests, and a small dependency set make integration easier. There is no security policy, and the project's same-day history leaves long-term maintenance unproven.
65%
Total Score
50
100
81
75
The manifest declares a proprietary license, so the release is licensed, but its terms may restrict use or redistribution for projects expecting open-source licensing.
The package and repository are owned by the same individual account, FluffyDiscord, rather than an organization. This does not indicate abandonment, but it suggests a limited visible backing structure.
The package is only 0 days old, with 4 releases in roughly 22 hours. This shows active initial publishing but provides no long-term maintenance record.
There are 0 commits and 0 active maintainers in the measured 3-month window, but the repository is only 0 days old. This leaves maintenance capacity unproven rather than confirming a collapse.
There are no issues or pull requests and no activity in the last month. The package is too new for this absence to demonstrate abandonment, but it provides no community evidence yet.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/intl Version ^6.4 || ^7.0 || ^8.0 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
symfony/validator Version ^6.4 || ^7.0 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.