App import and export manager for bulk data processing with readers, writers, mappings, and job lifecycle hooks.
72%
Total Score
caution
Recent activity is encouraging, but all recent commits come from one contributor and the repository has no security policy.
The package declares 17 runtime dependencies, tying it to a broad Tobento framework surface and increasing compatibility maintenance needs, but the dependencies are coherent with its application-level import/export functionality.
Only one registry account has publish access. Because the source repository is user-owned rather than organization-owned, this leaves limited visible publishing redundancy.
The repository owner is a GitHub user rather than an organization, so the single-contributor and single-publisher evidence is not visibly offset by organizational backing.
The package is 108 days old with three releases, including a release within the last day. This is active but still a relatively short track record.
All seven recent commits came from one contributor, creating a narrow maintenance handoff and increasing abandonment risk if that contributor becomes unavailable.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tobento/app Version ^2.0 | — | — |
tobento/app-pdf Version ^2.0 | — | — |
tobento/app-crud Version ^2.0 | — | — |
tobento/app-http Version ^2.0 | — | — |
tobento/app-user Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.