82%
Total Score
88
100
89
100
50
No build attestation or trusted-publisher provenance was recorded for the release. The source repository is available, but the published artifact's build origin is less independently verifiable.
Three contributors were active, but one made 70 of 73 commits, or about 96%. This is a maintenance concentration risk, partly reduced by the organization-owned project backing.
The repository name does not match this subpackage and its README does not mention it. The mismatch is consistent with a monorepo subpackage, but the lack of an explicit README mention leaves some package-to-repository ambiguity.
The project uses established build tools and has a repository security policy, but no security-scanning tools were detected. The missing scanning is a modest hygiene gap rather than evidence of abandonment.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.