This is an actively maintained, mature release line: the package is over five years old, has 667 releases, 82 releases in the last 12 months, a median release interval of about 1 day, and a stable non-prerelease version. It is not deprecated, has a declared BSD-3-Clause license with a license file, and does not run install-time lifecycle scripts. However, transparency and maintainability evidence is incomplete: the artifact has no README, tests, or changelog, no type declarations, no build attestation, and no linked source repository was declared, leaving repository activity and source-to-artifact verification unavailable. The large 1,065-file artifact suggests substantial implementation rather than an empty package, but the missing documentation and repository backing warrant caution before adopting it.
70%
Total Score
100
92
100
50
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.