This is a generally healthy, usable release with strong package evidence: it is a stable 2.0.0 release, is not deprecated or archived, has a substantial 73-file implementation with tests and documentation, and is backed by an organization-owned repository. Release activity is reasonably recent, but the repository shows no commits or active maintainers in the last 3 months, which is a meaningful maintenance concern despite the latest release and one merged pull request. Security transparency is also incomplete because no security policy or scanning tooling was found, and the release workflow does not declare top-level token permissions. Overall, it appears suitable to depend on with normal maintenance and security review, but it is not as reassuring as an actively developed and security-hardened project.
78%
Total Score
83
100
94
80
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
thelia/installer Version ~1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.