Documentation, tests, release notes, and read-only pinned workflows make the package transparent to integrate. One contributor made all 19 recent commits, so continuity depends heavily on that maintainer; the absent security policy is a smaller gap.
82%
Total Score
67
100
100
50
The repository is owned by an individual account, so the single-contributor concentration is not offset by visible organization backing.
All 19 recent commits came from one contributor, creating a real continuity risk if that maintainer becomes unavailable.
The repository has no security policy, leaving vulnerability-reporting expectations unclear; this is a modest transparency gap rather than evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
psr/clock Version ^1.0 | — | — |
symfony/console Version ^6.4 || ^7.0 | — | — |
rasuvaeff/yii3-outbox Version ^1.6 | — | — |
rasuvaeff/clickhouse-toolkit Version ^1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.