It has clear usage documentation, tests, a matching repository, and a permissive license. The small project is young and maintained by one person, with no security policy or scanning; pin this version if that trade-off is acceptable.
68%
Total Score
50
100
83
75
Only one registry account has publish access. The matching user-owned repository confirms a single publisher rather than organization-backed publishing capacity, so continuity depends heavily on that person.
The registry namespace and repository are owned by the same individual user, confirming direct ownership but no organizational backing to offset the concentrated maintainer base.
The package is young at 149 days, with three releases and a median interval of about 46 days; this shows some release activity but leaves limited long-term maintenance evidence.
All recent commits came from one contributor, giving the project a single-person bus factor and increasing abandonment risk if that contributor becomes unavailable.
Only one commit was recorded in the last three months, by one active maintainer. That is some recent activity but weak evidence of sustained maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nativephp/mobile Version ^3.0|^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.