The package is small and clearly scoped, with a license, README, and no install-time scripts. Its only release was about nine months ago, with no commits in the last three months; missing security scanning and a security policy add further maintenance gaps.
59%
Total Score
50
63
75
This is the sole release, published about nine months ago, so there is little evidence of sustained maintenance or release maturity.
The repository recorded no commits and no active maintainers in the last three months, leaving ongoing maintenance capacity unproven.
Composer build tooling is present, but the repository reports no security scanning tools, reducing automated supply-chain and code-health checks.
No security policy is provided, so consumers have no documented channel or process for reporting vulnerabilities.
Version 0.1.0 is not a stable major release, which indicates an early API and raises compatibility risk for dependents.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
thebbapp/result Version 0.1.0 | — | — |
thebbapp/push-service Version 0.1.0 | — | — |
thebbapp/content-source Version 0.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.