Usable with caveats: the package is actively released, tested, licensed, and backed by an organization, but it is still young and concentrated in one contributor. Missing security policy and explicit workflow permissions add smaller transparency concerns.
72%
Total Score
75
100
83
80
All five recent commits came from one contributor, creating a real continuity risk; organization ownership partly compensates because maintenance can potentially be handed off.
Five commits from one active maintainer in the last 3 months show ongoing work, but the small activity volume provides only limited maintenance depth.
The repository has zero stars, forks, and watchers, indicating little visible community adoption, although popularity is supporting evidence rather than a health verdict.
Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest security-process gap.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
papi-ai/papi-core Version ^0.15 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.