Recent publication and repository activity show the project is not abandoned, but no commits or active maintainers were recorded in the last three months. The repository has tests, a clear MIT license, and useful documentation, while security scanning and a security policy are absent.
64%
Total Score
63
100
83
83
Only one registry publishing account is listed, leaving a thin publishing base; the repository is user-owned rather than organization-backed, so there is no provided organizational compensation.
No commits and no active maintainers were recorded in the last three months, a meaningful maintenance concern despite the recent release and repository push.
There are 14 open issues, but no issues or pull requests were opened or closed in the last month, indicating limited current project interaction.
The repository has only 2 stars, 0 forks, and 1 watcher, providing little community validation; popularity is supporting evidence rather than a decisive health measure.
Composer is used for builds, but no security scanning tool is configured, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hexmakina/black-box Version 0.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.