o11y schema repo
78%
Total Score
healthy
Long-lived package with 81 releases in the last year and frequent updates, but limited transparency around documentation and publishing provenance.
No build attestation, trusted publisher identity, or staged publishing is present, so the release's publication provenance is less verifiable.
Four accounts have publish access, with two using the primary Salesforce domain. mkavone (gmail.com) and lwc-admin (lwcjs.org) are outside-domain publishing accounts, creating account-hygiene risk even though this does not establish a maintenance bus-factor problem.
The artifact has no README, tests, or changelog, which reduces consumer guidance; however, tests and changelogs are normally kept in source repositories, and the package artifact is substantial.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.