Documentation, tests, and a security policy provide useful support for adoption. Dependencies are limited, installation has no lifecycle scripts, and the repository is active, though still early-stage.
65%
Total Score
60
100
72
100
The manifest declares MIT while the artifact and repository license files are detected as Apache-2.0, creating a material licensing ambiguity despite having license files.
Only one registry account can publish releases, which increases publishing concentration, though repository activity provides some supporting evidence.
The repository is owned by an individual user rather than an organization, so the concentrated maintainer and contributor base represents genuine continuity risk.
Five releases in 52 days show active initial development, but the short history provides limited evidence of long-term maintenance.
One contributor holds 100% of the recent commits, creating a high single-person dependency for ongoing fixes and releases.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
webman/console Version ^2.1 | — | — |
opis/json-schema Version ^2.4 | — | — |
workerman/webman-framework Version ^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.