gosuperscript/axiom-money
This is a healthy but relatively young package with strong evidence of active maintenance and sound release hygiene. It has 15 releases over about 10 months, releases roughly every two weeks, a current non-prerelease version, an unarchived repository, recent commits from three active contributors, seven merged pull requests in the last month, tests, a complete small source tree, an MIT license, Composer build tooling, and Snyk scanning. The main reservations are that it remains below 1.0, has no changelog or security policy, has no declared top-level GitHub Actions permissions, and has no observed popularity; these are transparency and hardening gaps rather than evidence of abandonment, especially given the organization's active repository and recent development.
86%
Total Score
100
100
89
80
Health Score Breakdown
The repository has zero stars, forks, and watchers, so there is little external popularity evidence; however, popularity is only supporting evidence and the recent release, commit, and pull-request activity is more relevant to maintenance health.
No repository security policy was found, which weakens vulnerability-reporting transparency; active maintenance and Snyk scanning provide partial operational compensation but do not replace a policy.
The sole workflow lacks top-level permissions declarations. Although no top-level write permissions were observed, explicitly minimizing workflow token permissions would provide stronger CI hardening.
The current v0.7.4 release is not a prerelease, but the sub-1.0 major version indicates the public API may still change and warrants some adoption caution.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 brick/money Version ^0.14.1 | — | — |
gosuperscript/axiom Version ^0.6.9 | — | — |
superscript/interval Version ^2.0 | — | — |
superscript/monetary-interval Version ^0.2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 14 days ago
- Created
- 10 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.