This release is usable but too new to demonstrate mature maintenance: it has existed for only 4 days and has only one release, with all three recent commits coming from one contributor. The package is nevertheless transparent and reasonably well-scaffolded, with an Apache-2.0 license and license files, a substantial README, packaged tests, a matching repository, no deprecation status, no install-time lifecycle scripts, and organization ownership. Low repository adoption, the absence of a security policy, and the single-contributor bus factor warrant caution before taking a production dependency, particularly because the package bundles a substantial machine-learning stack.
68%
Total Score
70
100
78
90
The package is only 4 days old and has a single release, so there is not yet enough release history to establish maintenance reliability or long-term stability.
One contributor accounts for 100% of the 3 recent commits. Organization backing provides some potential handoff capacity, but no second active contributor is evidenced.
The repository has 3 commits in the last 3 months, all within its 4-day lifetime, showing recent work but too little history to establish sustained maintenance.
There are no open issues or pull requests and no issue or pull-request activity in the last month. For a repository only 4 days old this is not abandonment evidence, but it also does not demonstrate an active user or contributor community.
The repository has only 7 stars and no forks or watchers. Popularity is supporting evidence rather than a verdict, but these very small adoption signals provide little external validation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
syncfly/python-in-php Version 0.8.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.