Montserrat for composer.
56%
Total Score
caution
Usable with caveats: a complete, licensed font package, but no maintenance activity since December 2020.
Only one registry account has publish access, leaving a thin publishing base. This is partly consistent with the repository being user-owned, but it still increases continuity risk.
The repository is owned by an individual rather than an organization, so there is no visible organizational backing to compensate for the single registry maintainer and inactive project.
This is the only release, published about 5 years and 9 months ago, with no releases in the last 12 months. That is acceptable for a static asset but leaves maintenance and update support unproven.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with no release since December 2020 and indicating no current maintenance.
There are no open issues or pull requests and no recent issue or pull-request activity. For a small static asset this is not inherently alarming, but it provides no evidence of ongoing project support.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.