This release appears generally healthy and suitable to depend on: it is stable, actively released, non-deprecated, has no runtime dependencies, includes licensing and type declarations, and is backed by a non-archived repository with recent pushes, repository tests, build tooling, and npm provenance. The main concerns are that all recent commits come from one contributor, the linked repository does not match the package name or mention it in its README, issue activity is largely stagnant, and the repository lacks a security policy and security-scanning tooling; these warrant review for bus-factor and repository-association risk but do not outweigh the strong release and artifact evidence.
78%
Total Score
50
100
90
80
100
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.