The small dependency footprint and clear README make integration straightforward. Its young project, zero commits in the last three months, and missing security policy warrant caution before broad adoption.
61%
Total Score
67
100
83
83
The package and repository are owned by the same individual account, so the ownership path is clear, but there is no organizational backing shown to provide maintainer redundancy.
The package is only 165 days old and has two releases, both published within about 51 minutes, so its maintenance record is still too short to establish long-term stability.
There were zero commits and zero active maintainers in the last three months, a meaningful warning about current maintenance capacity for a package with a very short history.
The repository has only 3 stars, 0 forks, and 0 watchers, indicating a small adoption footprint; this is supporting caution rather than proof of poor quality.
The repository uses Composer build tooling, but no security scanning tools were detected, leaving a modest transparency and assurance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yahnis-elsts/plugin-update-checker Version ^5.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.