This release appears suitable to depend on, with strong recent maintenance evidence: it has 8 releases in the last 12 months, a stable non-prerelease version, an active non-archived repository, 12 commits from 3 maintainers in the last 3 months, and recent issue and pull-request closure. The package is small and focused, has a README and changelog, uses only two runtime dependencies, and has no install-time lifecycle scripts. Confidence is moderated by the absence of tests, security scanning, and a security policy, as well as very low repository popularity; these are meaningful hygiene gaps but do not outweigh the demonstrated release and commit activity.
82%
Total Score
88
100
83
90
The artifact and repository include a substantial README and changelog, but neither contains tests. For a component package, the missing test coverage is a genuine maintenance and regression-risk gap.
The repository is owned by a user account rather than an organization, so there is no organizational maintenance backing to offset reliance on the individual project owner.
The repository has 0 stars, 1 fork, and 1 watcher. This is weak external adoption evidence, but popularity is supporting evidence and does not outweigh the observed maintenance activity.
Composer is used as a build tool, which provides basic project tooling, but no security-scanning tool is configured. The missing security automation is a hygiene limitation rather than evidence of abandonment.
No repository security policy was found. This reduces vulnerability-disclosure transparency, although it is not by itself evidence that the package is unsafe or abandoned.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
drupal/core Version ^10.3 || ^11 | — | — |
jacerider/neo Version ^1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.