Clear licensing, documentation, tests, and dependency tooling support adoption. The small single-contributor base, limited recent registry releases, and unpinned workflow actions leave maintenance and build-integrity concerns.
68%
Total Score
50
50
88
75
Seven runtime dependencies create a moderate maintenance and transitive-risk surface for a small CLI, though the dependency set is explicit and appropriate to its functionality.
The package and repository are owned by the same individual account rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.
The package has nine releases and its latest registry release was in June 2024, with no releases in the last 12 months; this is partly offset by recent repository activity but still indicates a slow registry cadence.
All two recent commits came from one contributor, leaving maintenance highly dependent on a single person.
The repository recorded two commits in the last three months, showing some ongoing maintenance, but activity remains light.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.0 | — | — |
symfony/yaml Version ^5|^6|^7 | — | — |
symfony/console Version ^5|^6|^7 | — | — |
guzzlehttp/guzzle Version ^6|^7 | — | — |
krinkle/intuition Version ^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.