The package includes tests, a clear README, a stable release, and a recent repository push. Its release history has been inactive for over a year, while workflow references are unpinned and one release workflow installs an unlocked package.
62%
Total Score
75
100
83
67
The package has 21 releases but all registry releases occurred on August 6, 2025, with no releases in the last 12 months. That is a meaningful maintenance concern, although the repository was pushed more recently.
The repository recorded zero commits and zero active maintainers in the last three months. Alongside no registry releases in the last 12 months, this suggests maintenance has slowed materially.
There are two open pull requests but no new or merged pull requests in the last month, and issue counts are unavailable. This gives limited evidence of current collaboration.
The repository name does not match the package name and its README does not mention the package, so the package-to-source relationship is less transparent. The matching kanopi organization provides some compensation, but the gap remains worth checking.
The repository reports zero stars, forks, and watchers. Popularity is only supporting evidence, so this lowers confidence in broad adoption but does not by itself indicate unhealthy maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
e0ipso/shaper Version ^1.2 | — | — |
symfony/polyfill-php81 Version ^1.26 | — | — |
justinrainbow/json-schema Version ^5.2 || ^6.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.