This release appears healthy and suitable for dependency consideration: it is actively released, has a recent non-archived repository, extensive automated tests, clear licensing, build and security tooling, and no install-time lifecycle scripts or registry deprecation. The main concern is concentrated maintenance, with 98.3% of recent commits from one contributor despite organization backing; the absent security policy and incomplete workflow permission declarations are additional hygiene gaps. Overall, the strong recent activity and project structure outweigh these concerns, but teams should monitor maintainer continuity and CI permission hardening.
84%
Total Score
88
100
94
80
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
spora-ai/spora-core Version >=0.23.0 <2.0.0 || @dev | — | — |
symfony/event-dispatcher Version ^8.0 | — | — |
symfony/http-client-contracts Version ^3.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.