An pam management module
68%
Total Score
63
50
83
88
The package declares 11 runtime dependencies, including several framework, authentication, image, and extension requirements. This is a meaningful integration surface but not inherently unhealthy; the signal does not show an excessive or obviously unmanaged dependency profile.
Only one account has registry publish access, which is a resilience concern. The project_backing signal shows an organization-owned repository, making a short registry maintainer list less concerning than it would be for an otherwise unaffiliated project.
The package has existed for 434 days and has 8 releases, but only 2 releases occurred in the last 12 months and the median release interval is about 186 days. This indicates a relatively slow release cadence and warrants maintenance caution.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is the strongest negative maintenance signal. The recent release and push partially offset this, but do not demonstrate sustained development activity.
There were no new or closed issues or pull requests in the last month, and no pull requests were merged. The null open-issues count is unknown, so this is limited evidence of low collaboration rather than proof of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
weiran/core Version 1.0.* | — | — |
mews/captcha Version ^3.4 | — | — |
mlocati/ip-lib Version ^1.16 | — | — |
tymon/jwt-auth Version ^2.1.1 | — | — |
intervention/image Version 3.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.