Clear documentation, tests in the repository, and a recent release make adoption straightforward. The small active contributor base and workflow credential-sharing practices warrant ongoing maintainer attention.
78%
Total Score
70
100
89
67
Only one registry account has publish access, which is a concentration risk, but the repository is owned by the Innmind organization, providing some backing beyond the registry account.
One contributor made all three commits in the last three months, giving the project a single-person active bus factor. Organization ownership provides some handoff capacity but does not remove the concentration risk.
There are only two open issues and no pull requests, with no issue or pull-request movement in the last month. This is a mild sign of limited community activity, though it does not show abandonment by itself.
The repository has no stars, one fork, and one watcher, so there is little evidence of broad external adoption. Popularity is supporting evidence and does not outweigh the recent release history.
Composer build tooling is present, but no security scanning tools were detected. This is a transparency and hygiene gap rather than evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ~3.0 | — | — |
innmind/io Version ~4.0 | — | — |
innmind/url Version ~5.0 | — | — |
innmind/time Version ~1.0 | — | — |
innmind/immutable Version ~6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.