Principal-scoped custom skills — UI + manage_skill tool, served through core's skill tool.
68%
Total Score
caution
A first release with one active contributor and no security policy leaves maintenance and transparency gaps.
This is the package's first release, published 0 days ago, so there is no established release cadence or maintenance track record yet.
One contributor made 100% of the 16 recent commits, creating a narrow individual bus factor. Organization ownership provides some handoff capacity, but no second active contributor is shown.
The repository recorded 16 commits in the last 3 months, showing active development, but all activity came from one maintainer.
The repository has no SECURITY.md or other declared security policy, reducing transparency for reporting and handling vulnerabilities.
The v0.1.0 version is not a stable major release, which is consistent with an early project and signals that compatibility may still change.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
spora-ai/spora-core Version >=0.30.0 <2.0.0 | — | — |
spora-ai/spora-plugin-custom-skills-frontend Version >=0.1.0 <2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.