55%
Total Score
50
78
88
50
The package has had 85 releases since 2018, but none in the last 12 months and its latest release was in December 2021—about 4 years and 9 months ago. This is a substantial maintenance concern for a dependency.
There were zero commits and zero active maintainers in the last 3 months. Although the repository is not archived, the absence of recent commit activity raises abandonment risk for an old package release.
No build attestation or trusted-publisher metadata was found, leaving publication provenance less transparent. This is a supply-chain hygiene weakness, but not independently enough to make the release unfit.
The repository still receives some pull requests, but six new pull requests were merged zero times in the last month and no issues were closed. That suggests limited current maintenance responsiveness.
The repository name does not match the package and its README does not mention @emotion/core. This may be normal for a monorepo subpackage, but the lack of an explicit README reference weakens package-to-source transparency.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.