The package is clearly documented, licensed, stable, and backed by a matching organization-owned repository. Maintenance evidence is thin, so pinning this version is prudent.
67%
Total Score
67
92
50
The package has 23 releases since 2017, but none in the last 12 months and the latest registry release was about 17 months ago, indicating a slower maintenance cadence.
All recent repository activity came from one contributor. The organization-owned project provides some handoff capacity, but current activity remains concentrated.
The repository recorded only 1 commit in the last 3 months. This shows some activity, but provides limited evidence of sustained maintenance.
The repository has no security policy, reducing transparency for vulnerability reporting and response. The package's license, documentation, and active repository partly offset this gap but do not remove it.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
deployer/deployer Version ^7.0.0 | — | — |
sourcebroker/deployer-loader Version ^4.0.0 || ^5.0.0 || dev-master | — | — |
sourcebroker/deployer-instance Version ^7.0.0 || dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.