Wait for multiple callback
76%
Total Score
67
100
94
83
All two recent commits came from one contributor, leaving no demonstrated short-term contributor redundancy. Organization ownership provides some backing, but no second active contributor was observed.
Only two commits were recorded in the last three months, with one active maintainer. This is some recent activity, but the limited volume makes ongoing maintenance capacity less robust.
The repository uses TypeScript and Vitest for build and test tooling, showing a structured development setup. No security scanning tools were detected, which is a minor transparency limitation but not decisive.
The single workflow was fully analyzed with no injection or high-confidence audit findings. Its one action reference is unpinned, which is a modest reproducibility and workflow-hygiene concern; the lack of a top-level permissions block is not harmful on its own.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.