Package debug package shasoft/db-schema
58%
Total Score
caution
No release or repository activity has appeared since January 2024, despite a small single-owner project.
The release declares five runtime dependencies and no development dependencies. That is a relatively broad runtime surface for a small debug-oriented package, but the signal does not show an unsafe or excessive dependency pattern on its own.
The repository is owned by the individual user account shasoft rather than an organization, so there is no organizational backing shown to compensate for the single-maintainer structure.
The package has only two releases, with the latest on January 22, 2024, and no releases in the last 12 months. This is a meaningful maintenance concern, though the package is small and appears stable.
There were no new issues, closed issues, new pull requests, or merged pull requests in the last month. Combined with the old latest push, this provides no evidence of current community or maintainer activity.
The repository has zero stars and zero forks, with one watcher. This offers little external validation, but popularity is supporting evidence rather than a health verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.0 | — | — |
shasoft/db-tool Version * | — | — |
shasoft/db-schema Version * | — | — |
shasoft/filesystem Version * | — | — |
shasoft/reflection Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.