88%
Total Score
88
86
83
100
One contributor made about 86% of the last three months' 83 commits, creating concentration risk. The organization-owned project and six other active contributors partly compensate, so this is not a severe dependency risk.
The repository name does not match this platform-specific package and its README does not mention the package by name. This is a transparency concern for a binary subpackage, though the repository contains the corresponding win32-x64-msvc package directory.
The repository uses established build tooling, but no security-scanning tools were detected. That is a modest process gap rather than evidence of poor maintenance.
No repository security policy was found, reducing transparency for vulnerability reporting. The active organization-backed project and strong maintenance evidence limit the impact.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.