72%
Total Score
caution
Usable with caveats: active organization-backed project, but maintenance is concentrated and workflow dependencies are unpinned.
One contributor made about 97% of recent commits, creating a real continuity risk, though the organization-backed project provides some ability to hand off maintenance.
The repository continues to receive issues and pull requests, although none were closed or merged in the measured month, limiting the strength of this maintenance evidence.
The repository name does not match the package and its README does not mention the package, so the package-to-repository relationship is less transparent despite the matching organization.
The project uses established build and test tooling, but no security scanning tools were detected.
No repository security policy was found, reducing transparency for reporting and handling vulnerabilities.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.