The package includes tests, a README, and matching MIT licensing. Its small dependency surface and active repository status help, but the lone maintainer and unpinned workflow actions leave less margin for change.
64%
Total Score
50
100
89
75
Only one registry account has publish access. That creates some continuity risk, although the linked repository is user-owned and the small package scope makes a single publisher less concerning than for a large project.
The repository is owned by an individual rather than an organization. This does not indicate a problem by itself, but it provides less visible institutional continuity for a project with one registry maintainer.
The package has had 7 releases since January 2023, but none in the last 12 months and its latest release was about 20 months ago. This is meaningful evidence of slowing maintenance, although the project is relatively mature and may be stable.
The repository recorded zero commits and zero active maintainers in the last 3 months. Together with the absent registry releases, this raises maintenance and abandonment risk.
There is one open issue and three open pull requests, with no issues or pull requests merged in the last month. The unresolved queue is modest but consistent with reduced recent activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^2.0 || ^3.0 | — | — |
typo3/cms-core Version ^12.4 || ^13.4 | — | — |
psr/simple-cache Version ^2.0 || ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.