Documentation and packaging are clear, with a matching repository and declared license. The install hook and lack of security tooling add maintenance overhead.
42%
Total Score
0
100
79
67
The latest release was in August 2020, with no releases in the last 12 months despite 14 releases overall. This long period without updates is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and indicating no current maintenance.
The package runs a post-install command, which adds install-time behavior that should be reviewed and maintained as dependencies change. No other provided signal compensates for this extra operational surface.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no sign of an active user or contributor community.
The repository has no security policy. This weakens vulnerability-reporting transparency, although it is a secondary concern compared with the lack of recent maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
topthink/framework Version ^6.0 | — | — |
topthink/think-view Version ^1.0 | — | — |
topthink/think-helper Version ^3.1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.