The package is a tiny three-file template with a matching organization-owned repository and clear MIT licensing. Its single registry maintainer and missing security policy provide limited transparency for future maintenance.
58%
Total Score
75
75
75
Only two releases exist across more than 10 years, with no release in the last 12 months and a very long median release interval. This indicates low maintenance activity, although a small template package may change infrequently.
The repository had no commits and no active maintainers in the last three months, consistent with the last push occurring in September 2022. This is a meaningful abandonment concern even for a small template package.
Composer is used as a build tool, but no security scanning tool is configured. The missing scanning is a modest hygiene gap rather than evidence of unsafe maintenance.
The linked repository has no security policy. For a small layout template this is a limited transparency gap, but it leaves no documented channel or process for reporting vulnerabilities.
The current v0.0.2 release is not marked prerelease, but the very low version and only two total releases indicate limited maturity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.