Plugin, extension, asset, and render hook contracts for Inlay.
72%
Total Score
83
100
81
83
The package is only 36 days old, but it has 25 releases and 15 in the last 12 months, showing active early development rather than abandonment. The unusually rapid cadence also suggests the project has limited maturity.
One contributor made all 16 commits in the last three months, leaving no demonstrated backup maintainer in the observed activity. Organization backing partly reduces handoff risk, but the visible contributor base remains thin.
Composer build tooling is present, supporting a defined build path. No security-scanning tool was detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, so users have no documented reporting or response process. This is a hygiene concern rather than evidence that the package is unsafe.
Version v0.3.24 is not a stable major release, although it is not marked as a prerelease and recent releases contain no prerelease versions. Consumers should expect the API to remain subject to change.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.