The project has tests, a readable package, a stable release, and active repository ownership. Its small user base, quiet recent commit history, missing security policy, and unpinned workflow actions warrant extra caution for long-term use.
65%
Total Score
67
100
83
67
The package is mature, with releases since October 2012, but only one release in the last 12 months. That indicates a slow release cadence despite the recent 26.03.0 release.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although a recent release and push show the project is not abandoned, current development activity is quiet.
There are no open issues and one open pull request, but no issues or pull requests were closed in the last month. This provides little evidence of active community maintenance.
The repository has only 2 stars, 0 forks, and 2 watchers. This is limited supporting evidence of community adoption, though popularity alone does not determine health.
Composer is used for builds, but no security scanning tools are detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
sledgehammer/core Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.