Subscriptions Module for pantono
65%
Total Score
caution
A brand-new project with four releases in one day has not yet demonstrated durable maintenance.
The artifact and repository contain tests, which is a positive quality signal. The missing README reduces consumer guidance for this library package, while the absent changelog is not a packaging concern on its own.
The package is 0 days old, with four releases published within about 23 minutes. This shows active initial publishing but provides no evidence of sustained maintenance.
There were no commits and no active maintainers in the preceding three months. Because the repository is newly created, this is mainly a lack of maintenance history rather than proof of abandonment.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and assurance gap for a package intended to be consumed as a dependency.
The repository has no security policy. That limits vulnerability-reporting transparency, though the package's new age and small scope reduce how strongly this weighs on the overall assessment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pantono/core Version ^1.0 | — | — |
pantono/phinx Version ^0.16 | — | — |
pantono/database Version ^1.0 | — | — |
pantono/payments Version ^1.0 | — | — |
pantono/contracts Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.