Usable with caveats: the package is small, clearly documented, tested, licensed, and has no install-time scripts, but it has had no release or repository activity since 2023. Its single-maintainer base and limited adoption make long-term support less certain.
62%
Total Score
50
100
88
80
Registry publishing access is held by one maintainer; this is a modest continuity risk for a user-owned project because it leaves little visible publishing redundancy.
The registry namespace and repository are both tied to the same individual user account, providing direct ownership alignment but no organizational backing.
Only three releases exist, with no releases in the last 12 months and a latest release from January 2023; this materially reduces confidence in ongoing maintenance.
The repository had zero commits and zero active maintainers in the last three months, reinforcing the risk that maintenance has stalled.
There are no new or closed issues in the last month and one open pull request, indicating little recent project activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tightenco/collect Version ^8.0 || ^9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.