The small codebase includes tests, a README, a declared MIT license, and no install-time scripts. Its limited release history and inactive repository provide little evidence of sustained maintenance, while missing security tooling adds a smaller transparency concern.
68%
Total Score
63
100
83
83
One registry maintainer is a narrow publishing base, although the linked repository is also owned by the same individual, so this is a modest capacity concern rather than a severe risk.
The package and repository are owned by the same individual account rather than an organization, so there is no broader organizational backing shown.
The package is 174 days old but has only one release, so there is limited evidence of an established maintenance cadence.
The repository recorded zero commits and zero active maintainers in the last three months, despite the release being about six months old; this weakens evidence of ongoing maintenance.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, so this lowers confidence modestly but does not determine health.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/prompts Version ^0.1.0 || ^0.2.0 || ^0.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.