The package has a clear MIT license, useful documentation, tests, and a repository that matches its name. A single maintainer and no security policy leave limited backup if development stops.
64%
Total Score
50
92
75
Only one registry account has publish access, creating a thin publishing base. The matching user-owned repository provides direct ownership evidence, but no backup maintainer is shown.
The package has made no releases in the last 12 months, with the latest release on February 19, 2025. Its nine-release history shows some maturity, but current maintenance is stalled.
The repository had zero commits and zero active maintainers in the last three months, although its last push coincided with the assessed release. This supports the concern that development is currently inactive.
The repository has no security policy, so there is no documented channel or process for handling vulnerabilities. This is a transparency and response-capacity gap, not evidence of malicious behavior.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
sbwerewolf/batch-file-scripting Version ^3.0 | — | — |
sbwerewolf/json-serialize-trait Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.