spora-ai/spora-plugin-muse
Its MIT license, tests, and active CI provide useful transparency, while the missing security policy and narrowly concentrated maintenance leave meaningful uncertainty. The README also documents a pre-release core-interface dependency, so compatibility may require careful version pinning.
68%
Total Score
67
88
67
Health checks
The package is less than one day old with only two releases, so its maintenance record and maturity are not yet established.
One contributor accounts for all recent commits, creating a narrow handoff path. Organization backing partly compensates, but no second active contributor is shown.
Only three commits from one active maintainer were recorded in the last three months; activity is recent but provides little evidence of durable maintenance capacity.
No repository security policy was found, leaving reporting and response expectations undocumented.
The sole workflow has no top-level token permissions declaration, so its GitHub Actions permissions are less explicit than they should be.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/process Version ^8.0 | — | — |
spora-ai/spora-core Version ^0.24.0 | — | — |
symfony/http-client Version ^8.0 | — | — |
symfony/event-dispatcher Version ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 8 hours ago
- Created
- 14 hours ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.