This is a healthy, mature release with strong evidence of active maintenance and dependable publishing. It has 350 releases over roughly 5 years, 99 releases in the last 12 months, a stable non-prerelease version, current repository activity, 235 commits from 17 active maintainers in the last 3 months, substantial issue and pull-request throughput, npm provenance, a license, TypeScript declarations, security policy, build tooling, and no install-time lifecycle scripts. The main transparency concern is that the linked monorepo neither matches the package name nor mentions it in its README, although the organization-owned repository, extensive repository tree, tests, changelog, and active project backing substantially reduce that concern; workflow token permissions are also not uniformly declared at the top level. Overall, this release appears suitable to depend on, subject to normal review of the package's API and runtime behavior.
93%
Total Score
100
100
94
90
100
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.