This is a healthy, actively maintained release with strong evidence of maturity and organizational backing. It has 302 releases over more than four years, 121 releases in the last 12 months, a stable non-prerelease version, no registry deprecation, current repository activity, six active contributors, repository tests and changelog coverage, an explicit Apache-2.0 license, type declarations, and no install-time lifecycle scripts. The main reservations are absent build provenance attestation, incomplete workflow permission declarations, no repository security-scanning tools, and the linked monorepo not explicitly mentioning this package in its README; these are transparency and workflow-hygiene concerns rather than evidence of abandonment. It is a reasonable dependency for developers who accept those operational gaps.
88%
Total Score
100
100
90
90
50
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.6.2 | — | — |
@aws-sdk/checksums Version ^3.1001.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.