MIT licensing, a usable README, and seven releases over roughly one year provide a clear adoption baseline. The single maintainer and absent security scanning leave limited independent assurance.
63%
Total Score
50
50
89
75
Ten runtime requirements, including several framework, extension, and vendor packages, create a relatively broad dependency surface for a focused plugin.
Only one registry publishing maintainer is listed. The repository is user-owned rather than organization-backed, so there is little visible publishing redundancy.
The registry namespace and repository owner are distinct user accounts, with no organization backing shown. Combined with one registry maintainer, this indicates limited visible project redundancy.
There were no commits and no active maintainers in the last three months. Although the latest release was recent, the lack of ongoing repository activity weakens maintenance assurance.
The repository has one star, no forks, and no watchers, providing very little external usage or review evidence. Popularity is supporting evidence, but this still reduces confidence in community resilience.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
webman/channel Version ^2.1 | — | — |
yuandian/tools Version ^1.6 | — | — |
monolog/monolog Version ^2.8 | — | — |
yuandian/container Version ^1.0 | — | — |
workerman/http-client Version ^3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.