The stable release line, organization-backed repository, and clear README provide useful continuity for adopters. The install hook deserves extra care because it runs during installation.
55%
Total Score
75
67
50
No declared license, license file, or repository license file was detected, leaving the legal terms for use unclear.
A post-install command runs during installation. The signal does not show what it does, so this is a supply-chain hygiene concern rather than proof of unsafe behavior.
The package has existed since April 2019 with 28 releases, but only one release arrived in the last 12 months, indicating a noticeably slow current cadence.
The repository recorded zero commits and zero active maintainers during the last three months, despite the latest package release being published during that period; this weakens evidence of ongoing development.
The repository name does not match the package name, and no README mention was collected. This creates some uncertainty that the linked repository is the package's intended source.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
open20/amos-cwh Version ^2.8.0 | — | — |
open20/amos-core Version ^1.19.0 | — | — |
open20/amos-admin Version ^2.2.0 | — | — |
open20/amos-workflow Version ^1.0 | — | — |
open20/amos-email-manager Version ^1.1.19 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.