Simple, transparent parser combinators toolkit that supports any tokens
68%
Total Score
63
100
95
67
50
No build attestation, trusted publisher, or staged publishing is present, leaving the relationship between source and published artifact less transparent.
Only one registry account has publish access, creating a thin publishing base; repository organization backing provides some compensation but does not remove single-publisher dependence.
The package has 10 releases over about five years, but none in the last 12 months; this indicates a meaningful slowdown, though the latest release is recent enough to avoid an abandonment verdict.
No commits and no active maintainers were recorded in the last three months, a significant maintenance concern, although the repository's recent push date provides some counterevidence.
There is one open issue and five open pull requests, with no issues or pull requests merged in the last month; this suggests limited current responsiveness.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.