Additional static layer for respect validator
48%
Total Score
unhealthy
Risky: no releases or commit activity since 2021, with minimal project safeguards.
The package has 5 releases, but none in the last 12 months; its latest release was published about 5 years ago. This indicates substantial abandonment risk despite a short initial release period.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the release history showing no recent releases. This materially weakens evidence of ongoing maintenance.
The manifest declares MIT, while the artifact and repository contain a detected Apache-2.0 license file. The package is licensed, but the mismatch creates avoidable legal ambiguity.
The package includes a short README and has a GitHub release for this version, but it contains no tests or changelog. Missing tests reduce maintenance confidence, while the absent changelog is normal for a published artifact.
The repository has 0 stars and 0 forks, with 3 watchers. Popularity is only supporting evidence, but these counters provide little external evidence of maturity or adoption.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0 | — | — |
respect/validation Version ^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.