Healthy and usable, with a clear repository, active recent releases, tests, and straightforward packaging. Dependence on one contributor and limited repository security controls are the main caveats for a young package.
78%
Total Score
88
100
94
80
All 31 recent commits came from one contributor, creating a meaningful continuity risk. Organization backing helps provide potential handoff capacity, but no second active contributor is shown.
Composer is used for builds, but no security scanning tools were detected, leaving a repository security-hygiene gap that is relevant to supply-chain maintenance.
The repository has no security policy, which limits documented guidance for reporting and handling vulnerabilities in a package intended for application use.
None of the three workflows declares top-level token permissions. Although no write permissions were observed, explicit least-privilege declarations would provide stronger CI safety transparency.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
liberusoftware/theme-base Version ^2.0 | — | — |
liberusoftware/theme-support Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.