The linked project is clearly organization-backed, matches the package, and includes a valid license. Its same-day publication leaves little evidence of long-term maintenance, so pin and monitor updates.
70%
Total Score
83
100
89
88
This is the package's first release, published today, so there is no release cadence or history demonstrating sustained maintenance. That is a meaningful maturity gap, but not evidence of abandonment for a newly published metapackage.
There were no commits or active maintainers in the last three months, but the repository was created or updated today. This limits evidence of sustained maintenance rather than proving that activity has collapsed.
The repository uses Composer build tooling, appropriate for this package. No security scanning tool is configured, which is a minor hygiene gap but less significant for a tiny generated type-definition package.
No security policy is present. That reduces the project's disclosure transparency, although the package is a small metapackage with no install-time scripts.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/staudenmeir-belongs-to-through-impl Version ~2.18.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.