Risky to adopt without taking on maintenance risk. The package has had no release or recent repository activity since January 2023, and it lacks a README, leaving its integration and future support uncertain; tests and a stable MIT declaration provide some reassurance.
45%
Total Score
63
50
72
90
Only two releases were published, with none in the last 12 months; the latest release was about 3 years and 8 months ago. This is strong evidence of an aging and potentially abandoned dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly 3 years and 8 months since the latest release. This materially increases abandonment risk.
The package has five runtime dependencies, including several related synchronizer components. This is a meaningful dependency surface but appears consistent with a builder package rather than an inherently unhealthy profile.
A single registry maintainer account publishes the package. This is a thin publishing base, although the repository is also owned by the same account, so it does not indicate an ownership mismatch.
The artifact includes tests and the repository has tests, which is a positive quality signal. However, the package has no README, making it harder for consumers to understand and integrate this library; the absent changelog is not a concern for the published artifact.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
supermetrolog/synchronizer Version ^2.0 | — | — |
supermetrolog/synchronizer-already-sync-repo Version ^2.0 | — | — |
supermetrolog/synchronizer-filesystem-source-repo Version ^2.3 | — | — |
supermetrolog/synchronizer-filesystem-ftp-target-repo Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.