Use flow-relative (inline-start and inline-end) values for float and clear
73%
Total Score
88
100
90
100
50
No build attestation or staged publishing evidence is present, leaving release origin less independently verifiable despite the package being maintained.
The package has six releases over about three years and one release in the last 12 months. This is a modest cadence, but the latest release is recent and the source repository remains active.
All 276 recent commits came from one contributor, creating a real continuity risk. Organization backing partly compensates because maintenance can potentially be handed off, but no second active contributor is shown.
The repository name does not match the package and its README does not mention the package, so ownership of this specific package is less transparent. The monorepo context makes a name mismatch ordinary, but the missing README reference remains a caution.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.