neuralpin/notifyli
Websocket communication app
58%
Total Score
caution
No commits in three months after a short burst of releases, with only one maintainer and no security policy.
Health Score Breakdown
A post-install-cmd script runs during installation, creating an additional supply-chain and deployment review point even though this signal alone does not establish harmful behavior.
Only one registry maintainer is listed, and the repository is backed by an individual rather than an organization; this creates a thin ownership base and higher bus-factor risk.
The registry namespace and repository owner are associated with the same individual account, and the repository owner type is User; this supports ownership alignment but not organizational backing.
The package is young at 219 days, with five releases concentrated in the first week and no later releases shown; this leaves maintenance continuity uncertain.
The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance warning for a package released only recently.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ulises Rendon |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 predis/predis Version ^2.0 | — | — |
vlucas/phpdotenv Version * | — | — |
Weekly Downloads
Info
- Last Published
- 7 months ago
- Created
- 7 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.