Its release cadence and stable versioning suggest an actively maintained package. The compiled artifact has no README or type declarations, and publisher-account hygiene is mixed.
62%
Total Score
50
75
100
50
No build attestation or staged-publishing provenance is available, leaving the published bundle's connection to its build process less transparent.
No license is declared, detected, or included in the package, so redistribution and usage rights are unclear and reduce adoption safety.
Most publish-access accounts use the everymatrix.com domain, supporting organizational backing, but clokze (gmail.com), stefan.vlad (yahoo.co.uk), and emfe_release (ippx.com) are outside-domain publishing accounts and add account-hygiene risk.
The published artifact has no README, tests, or changelog. Tests and changelogs are normally repository material, but the missing README weakens consumer guidance for a library package.
The package has no type declarations, which makes integration less predictable for TypeScript consumers of this component library.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.