sk-wang/hao-code
This release is usable but carries meaningful maintenance and transparency risk. It has a substantial, test-backed package and repository, an MIT license, stable major-version status, recent repository activity, non-deprecated registry status, and conservative workflow permissions. However, the project is young, has an unusually rapid release cadence, and all seven commits in the last three months came from one contributor, creating a material bus-factor and continuity concern. The absence of a security policy and security-scanning tooling further reduces assurance, although the repository's workflows show no dangerous patterns. Depend on it only if you can tolerate single-maintainer risk and verify releases in your own deployment process.
62%
Total Score
63
50
89
90
Health Score Breakdown
Ten runtime dependencies, including Symfony components, HTTP/telemetry libraries, and schema tooling, represent a moderate dependency surface. This is reasonable for the documented SDK scope but increases transitive maintenance exposure compared with a minimal library.
The repository owner is an individual user rather than an organization, so there is no organizational maintenance buffer to offset the concentrated contributor activity.
The package is only 155 days old but has 129 releases, with 128 in the last 12 months and a median interval of about 2 hours 26 minutes. This demonstrates active publishing but the unusually high cadence leaves less evidence of long-term release discipline and maturity.
One contributor made 100% of the last-three-month commits, with the contributor identified as claude. This concentrated activity creates a significant continuity and handoff risk for a young package.
Seven commits were made in the last three months by one active maintainer, showing recent work but a thin maintenance base and limited redundancy.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nyholm/psr7 Version ^1.8 | — | — |
symfony/yaml Version ^6.4 || ^7.0 || ^8.0 | — | — |
symfony/clock Version ^6.4 || ^7.0 || ^8.0 | — | — |
open-telemetry/sdk Version ^1.0 | — | — |
symfony/http-client Version ^6.4 || ^7.0 || ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 13 days ago
- Created
- 5 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.