This is a usable but relatively young package with clear licensing, a stable release series, frequent releases, a non-archived repository, a matching source project, and a small dependency footprint. The main concerns are that the repository shows no commits or active maintainers in the last 3 months, the project is maintained by a single user account, there are no tests or security policy, and repository adoption is minimal. The recent release activity and current repository push provide some counterweight, but the limited maintenance and transparency evidence make this a caution-level dependency rather than a strongly established one.
68%
Total Score
50
100
83
90
Only one registry maintainer account is listed, which creates a bus-factor concern; the repository is user-owned rather than organization-owned, so there is no provided organizational backing to compensate for it.
A README and changelog are present, but neither the artifact nor repository contains tests. For a runtime plugin package, the missing test coverage is a genuine maintenance concern.
The source repository is owned by a user account rather than an organization, so the package has limited visible project backing and should not be assumed to have institutional support.
The repository records 0 commits and 0 active maintainers during the last 3 months. This is a significant maintenance concern, although the recent push and frequent registry releases partially offset the possibility of abandonment.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is not inherently negative for a small package, but it provides no evidence of active community maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
topthink/framework Version ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.