Its BSD-3-Clause licensing, tests, and README make integration clearer, while seven runtime dependencies add some operational burden. No install hooks or deprecation notice reduce adoption risk.
58%
Total Score
25
79
75
The package has 38 releases since February 2020, but none in the last 12 months and the latest release was about two years ago. This materially raises abandonment risk despite its prior release history.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and weakening confidence in ongoing maintenance.
Only one registry account has publish access, which leaves a thin publishing base. The repository is also user-owned rather than organization-owned, so there is no provided organizational backing to offset that concern.
The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these figures provide little independent evidence of adoption or community support.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is not by itself evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tasoft/process Version ^1.0 | — | — |
tasoft/event-manager Version ^1.0 | — | — |
tasoft/value-injector Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.