An example for sending Web Push notifications, using web-push-php
66%
Total Score
50
100
88
83
The registry lists one maintainer. That is consistent with the user-owned repository but leaves limited publishing redundancy if that maintainer becomes unavailable.
The repository is owned by an individual rather than an organization, so the concentrated maintainer and contributor signals are not compensated by visible organizational backing.
The package has had no registry releases in the last 12 months, and its latest release was in October 2023. This is partly offset by recent repository activity, but the release cadence still weakens confidence in ongoing published maintenance.
All recent repository commits came from one contributor, so maintenance capacity is concentrated in a single person and lacks demonstrated handoff depth.
The repository had one commit in the last three months from one active maintainer. Recent activity is a positive sign, but the very low volume provides only limited evidence of sustained maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
minishlink/web-push Version ^8.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.