Inject style tag to document head.
62%
Total Score
50
100
83
83
50
No build attestation, trusted publisher, or staged-publishing evidence is present, leaving the relationship between source and published artifact less transparent.
The package has had no registry release in over eight years, with zero releases in the last 12 months; this materially raises maintenance and compatibility risk.
There were zero commits and zero active maintainers in the last three months, although the repository's March 2024 push shows it is not entirely abandoned.
The repository has seven open issues and 15 open pull requests, but no issues or pull requests were opened or merged in the last month, indicating limited recent follow-through.
The repository uses npm build scripts, but no security scanning tools are reported, leaving a modest security-process gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.