This release is usable but not yet strongly proven as a mature dependency. It has a substantial, matching source repository with documentation, changelog, tests in the repository, extensive schema assets, an explicit license, stable versioning, no deprecation, and no install-time or analyzed workflow hazards. However, the package is effectively new in the registry, repository activity over the last three months is limited to three commits from one contributor, popularity is currently zero, and the repository lacks both a security policy and explicit workflow token permissions. These factors create meaningful maintenance and transparency risk, so adopters should verify ongoing maintenance and review the release before relying on it in critical systems.
68%
Total Score
60
50
83
80
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nfephp-org/sped-common Version ^5.0 | — | — |
justinrainbow/json-schema Version ^5.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.