vaheks/allkiri
The package has substantial documentation, tests, a security policy, and active repository work. Its workflow audit is clean aside from one low-confidence-risk hygiene finding, while the project remains early-stage and dependent on one contributor.
68%
Total Score
75
88
75
Health Score Breakdown
The package is only 4 days old, with 8 releases concentrated over roughly 18 hours. This shows active iteration but provides little long-term maintenance evidence.
All 152 recent commits came from one contributor, giving the project a complete single-person bus factor. This is a meaningful continuity risk for a new, technically specialized library.
The assessed version is a prerelease alpha, and all recent releases are prereleases. The README explicitly says the API may change until 1.0, limiting maturity for dependents.
Both workflows were analyzed successfully, use read-only permissions, and have no unpinned actions or untrusted checkout or script-injection paths. One high-confidence, low-severity adhoc package installation is a minor build-hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Martin Vahemets |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^3.0 | — | — |
psr/clock Version ^1.0 | — | — |
guzzlehttp/psr7 Version ^2.12.3 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 days ago
- Created
- 12 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.