This release appears healthy and suitable to depend on: it has a long release history with 237 releases in the last 12 months, was published very recently, is not deprecated, has npm provenance, and is backed by an active, non-archived organization repository. Recent repository activity is strong, with 27 commits from 9 active maintainers, 75 merged pull requests in the last month, a security policy, and read-only workflow permissions. The artifact is intentionally small and lacks packaged tests and a changelog, but repository tests, changelog, and GitHub Releases compensate for those gaps. The main transparency concern is that the linked monorepo neither matches the package name nor mentions it in its README, and the repository reports no dedicated security-scanning tooling; these are cautions rather than evidence of abandonment.
92%
Total Score
100
90
100
100
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.