The package includes tests, a README, and a stable 1.6.0 release with only three runtime dependencies. Its last release was over eight years ago, only one maintainer is listed, and the repository could not be found, leaving current maintenance and provenance difficult to verify.
42%
Total Score
50
100
80
100
The package was last released over eight years ago and has had no releases in the last 12 months, despite 33 releases overall. This is strong evidence of stale maintenance, although the historical release count shows it was once actively developed.
Only one registry account has publish access, which creates a thin operational base and increases continuity risk if that maintainer becomes inactive. This is supporting concern rather than proof of abandonment by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
spinit/util Version @stable | — | — |
spinit/uuido Version @stable | — | — |
webmozart/assert Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.