Usable with caveats: the package has frequent recent releases, active commits, a stable major version, and clear licensing. Maintenance is concentrated in one contributor, while the short README and lack of security policy leave transparency and continuity concerns.
73%
Total Score
67
100
83
88
The artifact includes a README and changelog; the README is only 175 characters, so it offers limited integration guidance for a framework. Missing package tests are normal packaging practice, while repository tests are unknown or absent as collected.
The registry namespace and repository owner match, and the repository is owned by the same individual account rather than an organization. This supports package identity but offers limited organizational maintenance redundancy.
All 20 recent commits came from one contributor, so maintenance continuity depends heavily on a single person and could be fragile if that person stops contributing.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these numbers provide little external evidence of community adoption.
Composer is used as a build tool, but no security scanning tools are configured. This is a transparency and maintenance gap, though active releases and commits provide some compensating evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nikic/fast-route Version ^1.3 | — | — |
workerman/workerman Version ^5.1 || dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.