webman plugin
72%
Total Score
67
50
94
67
The package declares 26 runtime dependencies and no development dependencies. This is a sizable runtime surface for an administrative plugin and increases upgrade and compatibility complexity, though it is consistent with the feature-rich package structure.
The repository is owned by a personal user account rather than an organization, so the single-contributor concentration is not visibly offset by organizational backing.
All 23 recent commits came from one contributor, so maintenance continuity depends heavily on a single person and has elevated bus-factor risk.
Composer is used for builds, but no security-scanning tools were detected, leaving less evidence of automated security oversight.
No repository security policy was found, which weakens the project's documented process for receiving and disclosing vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.20 | — | — |
ramsey/uuid Version ^4.0 | — | — |
tinywan/jwt Version ^1.11 | — | — |
webman/cache Version ^2.1 | — | — |
webman/event Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.