Snapshot assertions sugar for Codeception.
61%
Total Score
50
83
50
Only one registry account has publish access, and the backing repository is owned by an individual rather than an organization. That creates a thin publishing base, although repository tests and a matching source project provide some supporting evidence.
The package has 16 releases since May 2019, but none in the last 12 months; its latest release was in July 2025. This indicates a meaningful maintenance slowdown, though the project has an established release history.
The repository had zero commits and zero active maintainers in the last three months. This supports the concern that maintenance has paused, even though the repository is not archived.
The repository has no security policy, leaving no documented process for reporting vulnerabilities. This is a transparency gap, partially offset by the package's clear source repository and ordinary build tooling.
The assessed version is 1.4.0, while the reported latest version is 0.5.0, creating an inconsistent version profile. The release is not marked prerelease, but the discrepancy reduces confidence in the metadata.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
gajus/dindent Version ^2.0 | — | — |
codeception/codeception Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.