Clear documentation, repository tests, and a recent release provide useful support. Maintenance is concentrated in one contributor, while workflow actions are all unpinned and one high-confidence template issue remains. Pin this version if adopting it.
72%
Total Score
67
100
88
75
The package is 447 days old with seven releases, and the latest release was published recently. Only one release occurred in the last 12 months, so the cadence is limited but not evidence of abandonment alongside recent repository activity.
One contributor made all three recent commits, giving the project a bus factor of one. The repository is user-owned rather than organization-owned, so there is no provided organizational backing to offset that concentration.
The repository recorded three commits in the last three months with one active maintainer, showing current activity but a narrow maintenance base.
No repository security policy was found, leaving vulnerability-reporting expectations unclear for a package used in applications.
Version 0.1.6 is not a stable major release, which indicates API compatibility may still change, although it is not a prerelease.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sanmai/later Version ^0.1.7 || ^0.2 | — | — |
psr/container Version ^1.1.2 || ^2.0 | — | — |
sanmai/pipeline Version ^6.17 || ^7.0 | — | — |
symfony/console Version ^6.0 || ^7.0 || ^8.0 | — | — |
sanmai/version-info Version ^0.2 || ^0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.