The package includes tests, release notes, a clear MIT license, and an organization-backed repository. Registry publishing has been inactive since May 2024, while recent repository commits are absent; all workflow actions are unpinned and template-injection findings need review.
61%
Total Score
75
50
81
50
The package declares 18 runtime dependencies, including several functional libraries, creating a relatively broad dependency surface for consumers.
Only three releases exist, with none in the last 12 months and the latest published in May 2024. This is a meaningful maintenance concern, although the repository was still updated later.
No commits or active maintainers were recorded in the last three months. The repository's later push date is some evidence of activity, but the observed commit window still points to a thin current maintenance signal.
The project uses Make and Composer, but no security scanning tools were detected. This is a modest transparency and maintenance-hygiene gap.
The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
spatie/color Version ~1.5.0 | — | — |
scssphp/scssphp Version ^1.12.1 | — | — |
webmozart/assert Version ^1.11 | — | — |
brick/varexporter Version ^0.3.8 | — | — |
composer/composer Version ^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.