Package Health

niktomo/kasumi

The package includes a clear MIT license, a substantial README, repository tests, and a changelog. Its single-day release history and no commits in the last three months reduce confidence in ongoing maintenance, while workflow dependencies are unpinned.

Latest v1.0.2PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Maintainerscaution

Only one registry publishing account is listed. The repository is also owned by an individual rather than an organization, so there is no provided backing signal to offset the thin maintainer base.

Project backingcaution

The registry namespace and repository owner are the same individual account, with no organization backing shown. This is consistent with the thin maintainer and activity signals.

Release historycaution

There have been three releases, all within roughly 90 minutes on the first release day, with no subsequent release during the package's 181-day lifetime. That pattern gives little evidence of sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. For a package only 181 days old, that is meaningful evidence that maintenance may have stopped.

Repo popularitycaution

The repository has zero stars, forks, and watchers. This is weak supporting evidence rather than a verdict, but it offers no external adoption signal to compensate for the limited maintenance activity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

niktomo

Direct Dependencies

DependencyLast ReleaseScore
illuminate/support
Version ^12.0|^13.0
—
—

Weekly Downloads

Info

Last Published
6 months ago
Created
6 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform