A nice context menu you can append wherever you like
68%
Total Score
67
100
75
88
No license declaration or license file was found in the package or repository, leaving reuse and redistribution terms unclear for a dependency.
The package is only 21 days old and has a single release, so there is little evidence yet of sustained maintenance or release reliability.
All recent commits come from one contributor, creating a narrow individual maintenance base. Organization ownership provides some handoff capacity, so this is a caution rather than a severe risk.
Only one commit from one active maintainer was recorded in the last three months. That is limited evidence of ongoing maintenance, although the package is also very new.
Composer is used as the build tool, but no security scanning tool is configured. The missing scanner is a transparency gap, though no unsafe workflow was observed.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
model/assets Version ^0.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.