64%
Total Score
caution
Usable with caveats: sparse recent releases and missing package guidance limit confidence.
No build attestation, trusted publisher identity, or staged publishing is present, leaving the artifact's build provenance less transparent.
The package has 13 publish-capable accounts, but several use consumer Gmail accounts (brentvatne, exponent, kudochien, alanhughes, ccheever, szdziedzic, and wschurman) and others use outside domains (ide, bycedric, tsapeta, and philpl). With only 2 accounts on expo.io, this is an account-hygiene concern rather than proof of weak maintenance capacity.
The published artifact has no README, reducing consumer guidance for a library. Missing tests and changelog files are normal for a published artifact and do not lower the score.
The package has 11 releases over 606 days and a release within the assessment period, showing continued publication. Only 2 releases arrived in the last 12 months, so the recent cadence is modest.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.