Convert number to fraction
58%
Total Score
50
100
88
83
The package has one registry maintainer, creating a thin publishing base and some continuity risk. The linked repository identifies the same individual, so there is no conflicting ownership signal.
The latest registry release was in September 2015, with no releases in the last 12 months, which is a substantial maintenance concern for a dependency. The stable 1.2.2 version and later repository push partly compensate, but do not show ongoing release activity.
The repository recorded zero commits and zero active maintainers in the last three months, indicating little current development activity. This is consistent with the long release gap and lowers confidence in ongoing maintenance.
The repository reports no build tooling and no security scanning tools. For this small JavaScript package the lack of a build system is unsurprising, but the absence of security scanning is a modest transparency and hygiene gap.
No repository security policy was found, leaving no documented process for handling vulnerabilities. This is a hygiene gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.