The package is licensed, tested in its repository, and has a small dependency surface. Its beta status and roughly two years without a release or recent commits make ongoing maintenance uncertain.
57%
Total Score
75
100
83
75
The package has 33 releases since April 2022, but none in the last 12 months and the latest release was in September 2024, indicating a prolonged maintenance pause.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the broader release pause and increasing abandonment risk.
The repository has no security policy. This is a transparency and maintenance gap, though it is less significant than the absence of recent releases or commits.
The assessed release is v2.0.0-beta.9, so it is not a stable release even though the major version is established; this increases compatibility risk for dependents.
The sole workflow is fully analyzed and has no audit findings; its pull_request_target trigger has no untrusted checkout or script-injection sink. However, its only action reference is unpinned, a modest reproducibility and supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
snicco/kernel Version ^2.0 | — | — |
snicco/better-wpdb Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.