This is a usable but very young package with coherent source backing, a clear README and file tree, an MIT license, stable-version labeling, active recent publishing, and no install-time or dangerous workflow signals. Adoption carries meaningful maintenance risk because the project is only 3 days old, all six recent commits come from one contributor, there are no tests, no changelog, no security policy, and no security-scanning tooling; the single-user ownership model also provides limited bus-factor resilience. Depend on it cautiously, preferably after reviewing the implementation and establishing a contingency plan for future maintenance.
68%
Total Score
60
50
78
90
The package has five runtime dependencies and no development dependencies. The runtime set is moderate and understandable for the documented framework functionality, but the absence of dev dependencies is consistent with the absence of repository tests.
Only one account has registry publish access. That is a real publishing-continuity concern for an individually owned project, though registry access records do not by themselves establish who actively maintains the code.
A substantial README and explicit architecture documentation are present, but neither the artifact nor repository contains tests or a changelog. The missing tests are a genuine maintenance and regression concern for a framework component, while the documentation partially compensates for the missing changelog.
The repository is owned by a user account rather than an organization, so there is no shown organizational maintenance backing to offset the concentrated ownership and contributor base.
The package is only 3 days old and has three releases with a median interval of about 1.6 days. The rapid initial release cadence shows activity but provides almost no evidence of long-term maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
catfan/medoo Version ^2.1 | — | — |
league/plates Version ^3.5 | — | — |
vlucas/valitron Version ^1.4 | — | — |
nikic/fast-route Version ^1.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.