validate for webman plugin
55%
Total Score
caution
Usable with caveats: maintenance has stopped after two releases and the declared license conflicts with the artifact license.
There were zero commits and zero active maintainers in the last three months, indicating no recent development activity for a package released only twice.
The manifest declares MIT while the artifact license file is detected as Apache-2.0. Although a license file exists, the mismatch creates legal and transparency uncertainty for adopters.
The package has only two releases, both recorded on the same day, with no later release activity over roughly 11 months. This gives limited evidence of sustained maintenance.
The repository has zero stars, forks, and watchers. Popularity is supporting evidence rather than a verdict, but there is no visible community adoption to offset the thin maintenance record.
Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a modest repository hygiene gap, not proof of unsafe code.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.