Its MIT license, tests, and organization-backed repository provide useful continuity. The lack of a security policy and very small audience leave less assurance for long-term support.
58%
Total Score
75
100
78
83
The package has only four releases since October 2021, with a median interval of about 604 days and one release in the last 12 months. The recent January 2026 release shows it is not abandoned, but maintenance is slow.
There were zero commits and zero active maintainers in the last three months. This may reflect the package's slow cadence, but it provides little evidence of active ongoing maintenance.
The repository name matches the package, but its README installation command names stefna/people-contracts rather than stefna/person-contracts. That mismatch creates caution about package identity or stale documentation.
The repository has zero stars and forks and only three watchers. Popularity is supporting evidence rather than a verdict, but this provides little external validation.
Composer build tooling is present, but no security scanning tools are configured, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.