This release appears healthy and suitable to depend on: it is actively maintained, has a non-archived organization-backed repository, strong recent commit and pull-request activity, reproducible npm provenance, security tooling, a security policy, licensing, and TypeScript declarations. The main concerns are that the linked repository does not name or mention this package, recent releases are predominantly prereleases despite the current stable major version, and some workflows use pull_request_target or write-capable permissions; these warrant verification of repository/package alignment and CI controls but do not outweigh the strong maintenance evidence.
86%
Total Score
90
100
90
80
100
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.