Usable with caveats: it is actively developed, stable, licensed, and backed by a small but substantial test suite. The main concerns are that the project is only 43 days old and all recent commits come from one maintainer, with no security policy or scanning reported.
72%
Total Score
70
100
83
90
Only one registry account has publishing access. That is a real continuity concern for this user-backed project, although repository activity shows the account is currently active.
The registry namespace and repository are owned by the same individual account, confirming package ownership but providing no organizational maintenance redundancy.
The package is only 43 days old with four releases and a median interval of about 13 days. This shows active early development but provides little long-term maintenance evidence.
One contributor made all 22 commits in the last three months, leaving no demonstrated backup maintainer and increasing continuity risk.
The repository has zero stars, forks, and watchers. This is weak supporting evidence, but popularity alone does not outweigh the observed code and release activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
stougeiro/container-contract Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.