App media support.
68%
Total Score
50
50
89
50
The package declares 21 runtime dependencies, including many related Tobento components. This is a broad dependency surface for an application media package and modestly increases maintenance exposure.
Only one registry account has publishing access. The linked source repository confirms the project identity, but the available evidence does not show a broader publishing base to provide redundancy.
The registry namespace and repository owner are aligned, and the repository owner is an individual account rather than an organization. This supports identity matching but does not provide organizational continuity.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although the latest release was recent enough to show ongoing delivery, this short-term inactivity lowers maintenance confidence.
The repository has 0 stars and 0 forks, with 1 watcher. Popularity is only supporting evidence, but these figures provide little external evidence of community adoption.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tobento/app Version ^2.0 | — | — |
tobento/app-http Version ^2.0 | — | — |
tobento/app-view Version ^2.0 | — | — |
tobento/app-cache Version ^2.0 | — | — |
tobento/app-event Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.