The package is clearly documented, licensed, tested, and actively released. Its organization backing and read-only workflow permissions help, but the project has little history and no security policy.
67%
Total Score
67
100
79
75
The package is only 49 days old, despite five releases in that period. The frequent releases show active work, but the short history limits evidence of long-term maintenance.
One contributor made 100% of the 13 recent commits. The organization-owned repository provides some handoff potential, but no second active contributor is shown to share the current maintenance load.
There were 13 commits in the last three months, showing recent activity, but all activity comes from a single active maintainer. That limits demonstrated maintenance capacity.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest supply-chain hygiene gap, not evidence that the package is malicious.
The repository has no security policy. For a package integrating Android and iOS native code, this leaves vulnerability reporting and response expectations less transparent.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
pushinbr/pam-native Version ^0.8 || ^0.9 || ^0.10 || ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.