Tests, a clear README, and release notes make integration straightforward. The narrow dependency set and clean workflow audit are positives, but evidence of long-term support is limited.
65%
Total Score
50
100
88
67
The repository is owned by an individual user rather than an organization, so there is no provided evidence of organizational maintenance capacity to offset the concentrated contributor base.
The package has only three releases, all published on the same day, and is just 80 days old. This shows active initial publication but provides little evidence of sustained maintenance.
One contributor made all five commits in the last three months, giving the project a bus factor of one and increasing abandonment risk if that maintainer becomes unavailable.
There were five commits in the last three months, showing some activity, but all activity is concentrated in a very small project with no evidence of broader ongoing development.
Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and maintenance gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
topthink/framework Version ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.