The repository includes tests, a clear MIT license, and no install-time scripts. It has no security policy or automated workflow coverage, limiting evidence of ongoing oversight.
64%
Total Score
50
93
67
Only two releases have appeared across 580 days, with one release in the past 12 months. The current release is recent, but the long interval shows a sparse maintenance cadence.
The repository recorded 0 commits and 0 active maintainers during the past three months. This is concerning for maintenance continuity, although the repository was pushed recently for the assessed release.
The repository has no published security policy. That reduces transparency about vulnerability reporting and response expectations.
No GitHub Actions workflows were analyzed because the repository has none, so there is no automated workflow evidence to support build or release oversight. This is a limited transparency gap rather than a direct workflow security finding.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0 || ^2.0 || ^3.0 | — | — |
ramsey/uuid Version ^3.9 | ^4.0 | — | — |
react/socket Version ^1.3 | — | — |
react/promise Version ^2.7 | — | — |
binsoul/net-mqtt Version ^0.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.