Tests, a security policy, organization backing, and a small runtime dependency footprint provide useful support. CI hygiene is weak, and the project has not shown recent maintenance or releases.
54%
Total Score
75
100
81
88
The package has 23 releases since March 2020, but none in the last 12 months and its latest release was in January 2024, indicating a long release pause.
There were no commits and no active maintainers in the last three months, consistent with the broader absence of recent releases and raising abandonment risk.
No issues or pull requests were opened or merged in the last month, providing no evidence of current maintenance activity.
The linked repository is not archived, although its last push was in January 2024 and therefore does not offset the maintenance concern.
The assessed release is not marked prerelease, but the reported latest version is 0.4.4 while the assessed version is v1.2.5, an unexplained version inconsistency that reduces release transparency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sierratecnologia/hooks Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.