Strong type support, testing, and a broad contributor base improve day-to-day reliability. The linked repository lacks a package-specific README mention and has no security policy, while release provenance is unattested.
82%
Total Score
100
94
88
50
The release has no build attestation or trusted-publisher provenance, reducing publication transparency, although the active organization-backed project and pinned workflow references provide compensating evidence.
The repository name does not match this package and its README does not mention the package, so the package-to-repository relationship is less transparent; the monorepo context makes this a caution rather than a severe risk.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear; active maintenance partly offsets the transparency gap but does not remove it.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.