This is a mature, actively released, stable-major package with over 10 years of history, a clear Apache-2.0 license, substantial documentation, and an extensive test suite present in both the artifact and repository. The repository is backed by an organization, is not archived, and the package is explicitly referenced in its README. However, the absence of commits and active maintainers during the last 3 months is a meaningful maintenance concern despite a release on the assessment date, and the repository lacks security scanning, a security policy, and explicit workflow token permissions. Overall, it appears usable for dependency adoption, but maintenance continuity and repository security hygiene warrant monitoring.
72%
Total Score
75
50
89
80
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psx/http Version ^4.0 | — | — |
psx/json Version ^3.0 | — | — |
psx/model Version ^5.0 | — | — |
psx/record Version ^3.0 | — | — |
psx/schema Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.