Walk up the directory tree until the specified path is found.
68%
Total Score
50
100
85
67
50
No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable.
Only one registry account has publish access. The repository is user-owned rather than organization-backed, so there is limited visible publishing redundancy.
There were no commits from active maintainers in the last three months, indicating dormant development despite the recent registry release.
The repository has modest adoption signals with 17 stars, one fork, and one watcher; this is limited supporting evidence but not a health verdict.
The repository uses npm scripts but has no reported security-scanning tools, leaving automated security coverage unclear.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.