The package includes tests, a clear README, release notes, and a stable major version. Organization backing and a recent repository push help, but its workflow actions are unpinned and recent commits come from only one contributor.
68%
Total Score
67
100
86
67
The registry shows five releases but all were recorded on the same day, so long-term release cadence cannot be established. The version-specific release notes provide some compensating transparency.
One contributor made all commits in the last three months, concentrating recent maintenance in a single person. Organization ownership partly reduces handoff risk, but no second active contributor is shown.
Only one commit was recorded in the last three months, indicating limited recent maintenance activity. The recent push and organization backing provide some continuity but do not establish a strong cadence.
The repository name does not match the package name and its README does not mention the package, weakening source-to-artifact transparency despite the otherwise related-looking repository URL.
The repository has no published security policy, leaving vulnerability reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mautic/core-lib Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.