Codiware 0.9 appears reasonably healthy to depend on: it is actively released, not deprecated or archived, has a matching repository with a clear README, MIT licensing, substantial source and documentation, and recent activity from two contributors with balanced commit shares. The package is still young and pre-1.0, has no tests, no security policy or security scanning, and uses a moderately broad runtime dependency set, so it carries meaningful maturity and maintenance-process risk. Overall, it is usable but should be adopted with normal safeguards and awareness that its API may still evolve.
78%
Total Score
88
50
78
90
The package declares 12 runtime dependencies, including several frontend asset packages and Symfony/Guzzle components. This is a notable dependency-surface consideration, but the profile is understandable for the package's web IDE functionality rather than inherently excessive.
A substantial README and changelog are present, and repository releases compensate for the absence of packaged and repository tests. The lack of tests remains a modest maturity gap for a web IDE with file, Git, and console functionality.
The repository is owned by the individual user kabachello rather than an organization. This is valid project backing but leaves less organizational maintenance redundancy than an organization-owned project.
The repository has only 1 star, 0 forks, and 0 watchers. This is weak supporting evidence and limits external validation, but popularity alone does not establish poor health for a young package.
Composer build tooling is present, but no security scanning tools are configured. The missing security automation lowers process maturity without indicating abandonment.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1 || ^2.0 || ^3.0 | — | — |
guzzlehttp/psr7 Version ^2.0 | — | — |
symfony/process Version ^5.4 || ^6.4 || ^7.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.