This release appears generally safe to depend on from a maintenance and transparency perspective: it is a stable, non-deprecated package with a matching linked repository, a recent push, five commits in the last three months, and two active contributors. The main concerns are a very small release history (only three releases over roughly 3 years and 11 months), a minimal 11-character README, no tests in either the artifact or repository, no security scanning or security policy, and a concentrated contributor profile. These gaps keep it in the healthy range but warrant additional review before adopting it for a critical dependency.
78%
Total Score
70
78
90
A changelog and GitHub Releases provide some release transparency, but the README is only 11 characters and neither the artifact nor repository contains tests. For a framework-oriented package with substantial controllers and database migrations, the missing test coverage is a genuine maintenance concern.
The repository is owned by an individual user rather than an organization, so there is no organizational backing to offset the narrow maintainer base or contributor concentration.
The package is mature by age but has only three releases over roughly 3 years and 11 months, with one release in the last 12 months and a median interval of about 681 days. The recent release shows continued activity, but the sparse cadence limits evidence of sustained release discipline.
Two contributors were active in the last three months, but the leading contributor made 80% of commits. This creates some concentration risk, though the second contributor provides partial resilience.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is neutral rather than clearly positive: it may reflect a quiet project, but it provides little evidence of community engagement.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.