This release appears usable and actively maintained, with a non-archived repository, a release published on the assessment date, seven commits in the last three months, tests included in both the artifact and repository, an MIT license, and no install-time lifecycle scripts. The main concerns are the very small release history, a single active contributor and registry maintainer, no security policy or security-scanning tooling, no README in the artifact, and negligible repository adoption. These issues make the package dependent on a narrow maintenance base and provide limited transparency, but the recent activity and matching repository indicate a maintained project rather than an abandoned one.
68%
Total Score
60
100
78
90
Only one registry account has publish access. This is a narrow publishing base and creates continuity risk, though repository activity provides some compensating evidence of current involvement.
The source repository is owned by the user account osynapsy, not an organization, so there is limited evidence of institutional backing or maintainer succession.
The package is 1188 days old but has only three releases, with one release in the last 12 months and a median interval of about 594 days. This indicates sparse release maintenance, although the latest release is recent.
One contributor made all seven commits in the last three months, creating a high bus-factor risk. The linked repository is directly named for the package, but it is user-owned rather than organization-backed, so there is no organizational handoff evidence to offset the concentration.
There are no open issues or pull requests and no activity in the last month. This is not inherently unhealthy for a small package, but it provides little evidence of an active user or review community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twbs/bootstrap Version 5.* | — | — |
osynapsy/osynapsy-html2 Version @stable | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.