The package is typed, licensed, actively released, and backed by a busy organization with security scanning. Maintenance is concentrated in one contributor, and the linked repository does not identify this package, so verify the source relationship before relying on it.
72%
Total Score
75
100
94
100
One contributor made 100% of the 349 recent commits. Organization backing provides some continuity, but no second recent contributor is shown to share maintenance responsibility.
The repository recorded 349 commits in the last 3 months, but all were made by one active maintainer, making the maintenance base narrow.
The linked repository name does not match the package and its README does not mention the package. Although a monorepo mismatch is ordinary, the absence of any package reference makes the source relationship less transparent.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.