72%
Total Score
caution
Active releases and clear package metadata help, but unattested builds and a 0.x version leave meaningful adoption risk.
No build attestation, trusted publisher identity, or staged publishing is present. The package may still be legitimate, but its release origin cannot be independently verified.
Version 0.4.2 is not a stable major release, so the API may still change despite the absence of prerelease labels. This creates a moderate compatibility concern rather than an abandonment risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.