The repository is substantial, documented, tested, and has a security policy. Dependabot and read-only, fully pinned workflow references add useful safeguards, but longer-term maintenance is not yet demonstrated.
68%
Total Score
50
88
100
The package and repository are owned by the same user account, so the source linkage is clear, but there is no organizational backing to offset the single-contributor concentration.
This is the package's first release, published 0 days ago, so there is no release track record or demonstrated maintenance cadence yet.
One contributor made 100% of the single recent commit. The concentrated ownership is a maintenance risk for this user-owned project because no second active contributor is shown.
Only 1 commit was recorded in the last 3 months, which is consistent with a newly published project but does not yet demonstrate sustained maintenance.
The repository has 0 stars, 0 forks, and 0 watchers. This is weak supporting evidence, but the package's age of 0 days makes the absence unsurprising rather than a severe concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
psr/container Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.