Its six runtime dependencies increase upkeep for a small DI library, and the package remains on a pre-1.0 line. The registry shows no deprecation, but the repository could not be found, limiting verification of current maintenance and provenance.
43%
Total Score
50
50
The latest release was in June 2021, with no releases in the last 12 months despite a package age of about 6 years 10 months. This is a substantial maintenance and abandonment concern.
Six runtime dependencies, including several related package components, create some maintenance coupling for a small DI library, though the profile is not inherently excessive.
Version 0.2.1 is not marked prerelease, but the package is still below 1.0, so compatibility and long-term maturity are less established.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^1.0 | — | — |
knot-lib/cache Version ~0.1 | — | — |
knot-lib/config Version ~0.3 | — | — |
knot-lib/annotations Version ~0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.