Resolves function/constructor parameters via type and name lookup
42%
Total Score
88
100
83
75
The package strongly resembles respect/validation and explicitly borrows its identity, while the lookalike has far greater adoption and release history; consumers most likely wanted that package instead.
The package is young at 182 days with three releases and a median interval of about 48 days, showing regular early development but limited maturity.
All five recent commits came from one contributor, leaving maintenance highly concentrated despite organization backing.
No repository security policy is present; this is a transparency gap, although the package is a small focused library.
Both workflows were fully analyzed with no dangerous sinks or audit findings, but all 12 action references are unpinned, weakening build reproducibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.