Usable with caveats: it is a young but actively released package with a matching repository, clear licensing, and no deprecation. Dependence on one contributor and very limited repository adoption make long-term maintenance less certain.
68%
Total Score
60
100
89
100
Only one registry account, 7x, can publish the package. That is consistent with the matching user-owned repository but leaves little publishing redundancy.
The registry namespace and repository owner match, which supports authentic project ownership, but the owner is a single user rather than an organization with an evident handoff path.
All two recent commits came from a single contributor, so maintenance depends entirely on one person and could stop if that contributor becomes unavailable.
There are no open issues or pull requests and no recent issue or pull-request activity. This is neutral for a small package, but it also shows no evidence of an active user community.
The repository has only one star, no forks, and no watchers. Low adoption is not proof of poor quality, but it provides little external evidence or community support for this young package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
se7enxweb/exponential-legacy-installer Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.