<source media="(pref
74%
Total Score
caution
Usable with caveats: no commits in three months and all nine workflow actions are unpinned.
The package has 127 releases over roughly five years, but only one release in the last 12 months. The recent release and long history show maturity, while the slower current cadence warrants caution.
There were zero commits and zero active maintainers during the last three months. The recent release partly offsets this, but the lack of current development activity raises maintenance risk.
The repository has only one open issue and three open pull requests, but no new or closed issues or merged pull requests in the last month. This supports the broader picture of limited recent activity.
The repository uses npm scripts and Babel, but no security-scanning tools were detected. That is a hygiene gap rather than evidence that the package is unsafe by itself.
No security policy was found in the linked repository. This reduces transparency for vulnerability reporting, although it is not an abandonment signal on its own.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.