Usable with caveats: the repository is active, well documented, tested, and not deprecated, but this is a young package with only two releases and all recent commits from one contributor. Its proprietary license and limited security-process evidence also warrant review before adoption.
67%
Total Score
75
50
78
80
Thirteen runtime dependencies make this integration module substantially coupled to the Univeros and Polaris ecosystems. That breadth is consistent with its documented glue-module role, but it increases the maintenance surface.
The package declares a proprietary license in its manifest, so licensing terms should be confirmed before dependency use; no license file is present to provide additional detail. The manifest declaration means this is not an unlicensed release.
Only two releases have been published across roughly 92 days, so the project has limited demonstrated release maturity even though the latest release is current.
One contributor made 100% of the 48 recent commits, creating a real continuity risk. Organization ownership provides some ability to hand work off, but no second active contributor is evidenced.
The repository recorded 48 commits in the last three months, showing strong recent activity, but all commits came from one active maintainer.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
polaris/cli Version ^0.1 | — | — |
polaris/pdo Version ^0.1 | — | — |
polaris/core Version ^0.1 | — | — |
univeros/cli Version ^2.5 | — | — |
polaris/psr15 Version ^0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.