The package is small but has tests, a clear MIT license, and organization-backed source. Its sparse release history, prerelease status, and no commits in the last three months make long-term maintenance less certain.
58%
Total Score
75
80
Only four releases have appeared since December 2022, with one release in the last 12 months and a median interval of about 1 year 5 months; this suggests a slow maintenance cadence.
The repository shows no commits and no active maintainers in the last three months. The repository was pushed at release time, but ongoing maintenance activity remains unproven.
The assessed release is v2.0.0-alpha1, explicitly prerelease, and half of recent releases are prereleases, so compatibility and support expectations are less settled.
The sole workflow was fully analyzed with no high-confidence audit findings or untrusted checkout and script-injection paths. All three action references are unpinned, leaving a supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
micro/kernel Version ^2.0 | — | — |
league/flysystem Version ^3.0 | — | — |
micro/kernel-boot-dependency Version ^2.0 | — | — |
micro/kernel-boot-configuration Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.