The package includes a README, repository tests, release notes, and a security policy. Its small user base and pre-1.0 version leave less evidence of long-term support.
62%
Total Score
33
50
88
100
The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful sign of currently slow maintenance.
The package declares nine runtime dependencies, creating a relatively broad dependency surface for a small adapter. The signal provides no evidence that these dependencies are unsafe or poorly maintained.
Only one account has registry publish access. This is a limited publishing base, though the repository activity and ownership context provide some supporting evidence.
The registry namespace and repository owner are both zero-to-prod, but the owner is a user account rather than an organization. This provides clear ownership alignment without strong organizational backing.
The repository has one star, zero forks, and one watcher, indicating very limited adoption evidence. Popularity is only supporting evidence, so this lowers confidence in maturity rather than deciding the verdict alone.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
zero-to-prod/data-model Version ^81.7 | — | — |
zero-to-prod/psr4-varname Version ^2.0 | — | — |
zero-to-prod/transformable Version ^71.0.9 | — | — |
zero-to-prod/package-helper Version ^1.1.3 | — | — |
zero-to-prod/psr4-classname Version ^71.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.