Pack the JetBrains Mono NL font for front end
68%
Total Score
caution
Usable with caveats: maintenance has been quiet since April 2025.
One registry maintainer is responsible for publishing the package. That is a thin publishing base, although it is not inherently concerning for a small, narrowly scoped resource package.
The package and repository use the same individual-owned namespace, so the source ownership is consistent but does not show organizational backing. This provides limited evidence of maintenance capacity.
Only two releases exist, with none in the last 12 months and a latest release in April 2025. The package is a static font resource, so infrequent releases are understandable, but the long gap still lowers maintenance confidence.
There were no commits and no active maintainers in the last three months. This supports the observed maintenance slowdown, though a static font bundle may require few changes.
The repository uses Composer, showing build tooling is present, but it has no security scanning tools. The missing scanning is a modest transparency gap, not a severe adoption blocker for this static resource package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pith/base Version >=0.2.0 | — | — |
pith/workflow-elements Version >=0.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.