Healthy and reasonable to use, with a narrow maintenance base as the main caveat. The repository is active, tested, licensed, and not deprecated, but all recent commits come from one contributor and the project has limited adoption evidence.
79%
Total Score
83
100
88
80
The package has existed since February 2021 and was updated as recently as June 2026, although only one release appeared in the last 12 months and the median interval is about 160 days. This indicates ongoing but modest maintenance.
One contributor made all eight commits in the last three months, creating a meaningful continuity risk if that person becomes unavailable. Organization backing provides some ability to hand maintenance off, but no second recent contributor is shown.
No security policy is present, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is partly offset by the repository's security scanning.
None of the three workflows declares top-level token permissions, so their GitHub Actions access is less explicit than ideal. No workflow is shown requesting top-level write access.
Version 0.5.0 is not a stable major release, so the public API may still change. It is not marked as a prerelease, which provides some stability for its current release line.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
solido/common Version ^0.4 || ^0.5 | — | — |
symfony/property-access Version ^7.4 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.