82%
Total Score
healthy
Active source project with strong package basics, offset by sparse releases and unpinned workflow actions.
No build attestation or trusted publisher is recorded, leaving publication provenance less transparent; this is a meaningful but not severe gap for the otherwise simple package.
The package has 26 releases over about 2 years and 9 months, but only one release in the last 12 months, indicating a sparse current cadence.
The repository uses established build tooling, but no security scanning tools were detected; this is a modest transparency gap rather than evidence of abandonment.
The repository has no security policy, so vulnerability reporting expectations are not documented.
Version 0.32.0 is not a prerelease, but the recent prerelease share is 45%, so the package has some maturity uncertainty despite this stable release.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.