The repository has tests, a changelog, security scanning, and a security policy. Maintenance is thin, with one recent commit and no releases in the last 12 months, while the organization provides some continuity. Workflow references are all unpinned, adding a supply-chain hygiene concern.
68%
Total Score
70
100
88
100
The package has only three releases and none in the last 12 months; the latest release is more than a year old, which lowers confidence in ongoing maintenance.
All recent commits came from one contributor, creating concentration risk; organization ownership partly compensates by allowing maintenance handoff.
Only one commit was made in the last three months by one active maintainer, showing very light recent maintenance.
There are 12 open issues and no issues or pull requests were closed in the last month, suggesting limited current responsiveness.
Version 0.3.0 is not a stable major release, although it is not marked prerelease and recent releases contain no prerelease share. This is a modest maturity concern rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nette/utils Version ^3.1.0|^4.0.0 | — | — |
orisai/utils Version ^1.0.0 | — | — |
orisai/exceptions Version ^1.0.0 | — | — |
orisai/source-map Version ^1.0.0 | — | — |
nette/robot-loader Version ^3.4.0|^4.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.