The package includes tests, a changelog, release notes, a matching Apache-2.0 license, and a clean read-only workflow audit. The organization-owned repository is active, but its short history leaves limited evidence of long-term maintenance.
68%
Total Score
67
100
81
88
The package is only 76 days old with two releases and a 76-day median interval, so there is limited evidence of sustained release maintenance.
One contributor made all four recent commits. Organizational ownership offers some handoff capacity, but no second active contributor is shown to share maintenance.
Four commits from one active maintainer in the last three months show current work, but the activity base is narrow and provides limited resilience.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest repository hygiene gap.
The repository has no security policy, reducing transparency about vulnerability reporting and maintenance response.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
runapi-ai/core Version ^0.9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.