Healthy and actively usable, with strong release history and a current, unarchived repository. The main caveats are that recent development is concentrated in one contributor and the linked repository does not clearly mention this package, while workflow security hygiene is incomplete.
78%
Total Score
63
50
83
80
Thirteen runtime dependencies create meaningful transitive maintenance surface, but the profile is consistent with a framework engine and is not inherently excessive for this package type.
All recent repository commits came from one contributor, creating a thin operational base. Organization ownership provides some handoff capacity, but no second active contributor is shown.
Only one commit was recorded in the last 3 months, showing slower source activity than the frequent registry releases, although the repository was recently pushed and releases remain active.
There are no open issues or pull requests, and no recent issue or pull-request activity. This is not negative by itself, but it provides little evidence of a broader user or contributor community.
The repository name does not match fusio/engine and its README does not mention the package, so the linkage is less transparent and the package may be hosted in a broader or differently named project.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0|^2.0|^3.0 | — | — |
psx/http Version ^4.0 | — | — |
psx/oauth2 Version ^4.0 | — | — |
psx/record Version ^3.0 | — | — |
fusio/model Version ^4.0|^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.