62%
Total Score
caution
More than 11,000 releases in a year and a 95% prerelease history make this release unusually hard to assess.
No build attestation or staged publishing evidence is present, so the relationship between the published artifact and its source build cannot be independently verified from this signal.
The published artifact has no README, tests, or changelog, but this appears to be a compiled distribution package; tests and changelogs belong in the source project, and their absence from the artifact is expected. The missing README is a minor consumer-documentation gap.
The package has existed for about 14 months and published 11,785 releases in the last year, with a median interval of about 22 minutes. This shows active publication but unusually rapid churn, which weakens release predictability.
Version 1.19.0 is a stable major and not itself a prerelease, but 95% of recent versions were prereleases. That history makes the package's stability less established than the current version label suggests.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
zod Version 4.1.8 | — | — |
effect Version 4.0.0-beta.83 | — | — |
@ai-sdk/provider Version 3.0.8 | — | — |
@opencode-ai/sdk Version 1.19.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.