80%
Total Score
healthy
Frequent releases and active project maintenance support this package; a mismatched README and largely unpinned workflows reduce transparency.
No build attestation or trusted-publisher provenance is present, leaving publication origin less verifiable; the active organization-backed repository provides some compensating context.
The artifact includes a README and this exact version has GitHub release notes, while the repository has tests and a changelog. However, the published README is headed '@zag-js/geometry' rather than this package, reducing documentation transparency.
The repository name does not match '@zag-js/rect-utils' and its README does not mention the package; combined with the mismatched published README, this creates uncertainty about package-specific documentation, though the organization-backed monorepo context partly compensates.
The repository uses established build tools including TypeScript, Vite, tsup, SWC, npm scripts, and esbuild. No security-scanning tool was detected, which is a modest hygiene gap.
The repository has no security policy, reducing transparency for vulnerability reporting and response expectations.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.