The package is small and focused, with one runtime dependency and a matching MIT license. Its repository includes tests and no install-time scripts; single-contributor ownership and no security policy are the main limitations.
82%
Total Score
83
100
93
83
All 9 recent commits came from one contributor, giving the project a high bus-factor risk. The organization-owned repository provides some handoff capacity, but no second active contributor is shown.
Composer is used as the build tool, but no security-scanning tools were detected. For a small package this is a meaningful hygiene gap, though it is not evidence of abandonment by itself.
The repository has no security policy. This weakens vulnerability-reporting transparency, although the package remains actively maintained and is not otherwise marked as deprecated or archived.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pushword/core Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.