The package is clearly licensed and its repository matches the package, with no install-time scripts or deprecation notice. Its minimal five-file codebase, 13 runtime dependencies, absent tests and security policy, and lack of recent activity leave little maintenance assurance.
38%
Total Score
63
50
61
75
The package has four releases since October 2016, but none in the last 12 months and the latest release was October 2020. This long release gap is strong evidence of abandonment risk.
There were zero commits and zero active maintainers in the last three months, consistent with the release history's multi-year inactivity and materially increasing abandonment risk.
Thirteen runtime dependencies create a substantial dependency surface for a five-file package, increasing maintenance and compatibility burden.
The artifact and repository each contain only five files, including one source file and no test suite. This is a very small project footprint and provides limited evidence of maturity.
A README and exact-version GitHub release are positive transparency signals. The absence of tests and a changelog is not a packaging fault for this artifact, though the README's empty usage section limits consumer guidance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laasti/peels Version ^0.2.1 | — | — |
laasti/views Version ^0.2.2 | — | — |
league/booboo Version ^2.0.0 | — | — |
laasti/lazydata Version ^0.6.1 | — | — |
monolog/monolog Version ^2.1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.