It includes tests, a changelog, release notes, a license, and a security policy. CI uses read-only permissions and pins all 16 analyzed actions, but the project has little operating history and concentrated maintenance.
67%
Total Score
67
86
100
The package is only 1 day old with two releases, so its maintenance record and compatibility history are not yet established.
One contributor accounts for all recorded commits in the last 3 months. Because the repository is user-owned rather than organization-owned, there is no provided project-backing signal to offset this concentration.
Only one commit was recorded in the last 3 months, which provides limited evidence of sustained maintenance despite 36 merged pull requests in the last month.
The assessed version is a release candidate, and all recent releases are prereleases; this indicates an explicitly pre-stable contract and higher change risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
maatify/exceptions Version ^1.0 | — | — |
maatify/persistence Version ^1.1 | — | — |
maatify/shared-common Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.