The release is only about an hour old, is still 0.x, and has no established commit record; that makes long-term maintenance unproven. A clear README, tests, matching MPL-2.0 licensing, and no install scripts are reassuring.
65%
Total Score
50
100
79
75
The package is 0 days old with only 2 releases published within about an hour, so there is not yet enough history to demonstrate a durable maintenance pattern.
There were 0 commits and 0 active maintainers in the last 3 months, leaving maintenance capacity unproven; the package's same-day creation partly explains this result but does not remove the uncertainty.
The repository uses Composer, but no security scanning tools were detected. This is a modest transparency and hygiene gap, not a severe dependency risk by itself.
No repository security policy was found, reducing the available guidance for reporting vulnerabilities in a package that processes imported activity files.
Version v0.1.1 is an early 0.x release rather than a stable major release, which increases API-change and maturity risk for dependents.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
youmad/endurance-fit Version ^0.1.1 | — | — |
youmad/endurance-activity Version ^0.1.0 | — | — |
youmad/endurance-foundation Version ^0.1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.