[![][npm-badge]][npm-url] [![][travis-badge]][travis-url]
60%
Total Score
50
100
86
83
50
The latest registry release was in January 2020, with no releases in the following six years; this is a substantial maintenance concern, although the repository was pushed more recently.
The release has no build attestation or trusted-publisher provenance, so consumers cannot independently verify how the published artifact was produced.
The package has one registry maintainer, leaving a thin publishing base and increasing continuity risk for a package without recent registry releases.
There were no commits or active maintainers in the last three months, which weakens evidence of current maintenance, partly offset by the repository's push in September 2025.
There was no issue or pull-request activity in the last month, while two issues and five pull requests remain open; this suggests limited recent project follow-through.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.