Clear licensing, documentation, and release notes make the package easier to understand and adopt. Its lone maintainer, absent recent commits, and lack of security tooling leave meaningful maintenance risk.
58%
Total Score
38
100
83
75
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly two-year-plus release gap and indicating stalled maintenance.
Only one registry account has publish access. Because the project is user-owned rather than organization-backed, this leaves a thin publishing base and increases continuity risk.
The repository is owned by the same individual namespace as the package, confirming direct ownership but providing no organization backing to compensate for the single-maintainer structure.
The latest release was on February 19, 2024, with no releases in the following 12 months; at collection time this represents roughly two years and seven months without a new release.
Four issues remain open, with no new or closed issues and no pull-request activity in the last month, offering no evidence of active issue handling.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ~v3.4 | — | — |
niirrty/niirrty.io Version ^0.6 | — | — |
niirrty/niirrty.core Version ^0.6 | — | — |
niirrty/niirrty.io.vfs Version ^0.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.