The package has a clear README, a matching source repository, and a small runtime dependency set. Its old project tooling and lack of a security policy reduce transparency further, so pinning this release carries substantial maintenance risk.
38%
Total Score
33
100
64
75
The latest release was in March 2016, with no releases in the last 12 months despite five historical releases. This long period without published maintenance is a strong abandonment concern.
There were zero commits and zero active maintainers in the last three months, consistent with the repository having been inactive since 2017. This materially lowers confidence that defects or compatibility problems will be addressed.
The package and repository are owned by the same individual account rather than an organization. This is consistent and not inherently unhealthy, but it offers less visible backing capacity than an organization-owned project.
There were no new or closed issues or pull requests in the last month, while four issues remain open. This supports the conclusion that maintenance and user support are inactive.
The repository has six stars and two forks, indicating limited adoption. Popularity is only supporting evidence, but the small footprint provides little additional confidence alongside the stale activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
watoki/factory Version 1.* | — | — |
watoki/reflect Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.