This is a very healthy release to depend on. It has a long release history with 362 releases and 99 releases in the last 12 months, is stable and non-deprecated, and is backed by an actively maintained organization-owned repository with 235 recent commits from 17 maintainers. The package is MIT licensed, typed, has reproducible npm provenance, no install-time lifecycle scripts, and no runtime dependencies. Repository tests, changelog, security policy, build tooling, and active issue/PR handling provide strong compensating evidence for the package artifact's lack of bundled tests and changelog. Minor transparency and workflow-hygiene concerns remain because the repository does not explicitly mention this package in its README and two workflows lack top-level permission declarations, but these do not outweigh the strong maintenance and backing evidence.
94%
Total Score
100
100
94
90
100
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.