The project has strong build provenance, tests, type declarations, and active organizational backing. The package is otherwise lightly published and maintained by one recent contributor, so long-term continuity remains a concern.
68%
Total Score
67
70
50
100
The package is about 1000 days old with 21 releases, but only 2 releases in the last 12 months; this indicates a slower current release pace without showing abandonment.
All recent commits come from one contributor, creating continuity risk; organization ownership provides some ability to hand maintenance to another contributor.
The repository received 3 commits from 1 active maintainer in the last 3 months, showing ongoing work but limited recent maintenance capacity.
The repository name does not match the package name and its README does not mention @pkgr/core, so the package-to-repository relationship is less transparent, though it may be a normal monorepo subpackage.
Version 0.3.6 is not a stable major release, although it is not prerelease and recent releases contain no prerelease versions, providing some stability evidence.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.