Usable with caveats: this is a very new release with only one recent repository contributor and little adoption evidence. The repository is active, the package is not deprecated, and it includes a consumer-facing README, but maintenance maturity and security transparency are still limited.
64%
Total Score
50
100
78
88
The package declares a proprietary license in its manifest, so it is not an unlicensed artifact. However, no license file was included, leaving fewer details for consumers who need to verify the applicable usage terms.
The package is only 1 day old and has already issued 4 releases, with a median interval of about 15 hours. That shows active initial work but provides too little history to establish mature release practices.
All recent repository commits came from one contributor, giving the project a top-contributor share of 100%. With the repository owner classified as a user rather than an organization, this leaves a meaningful continuity risk.
There was 1 commit in the last 3 months from 1 active maintainer, including activity on the collection date. This indicates current work but is too sparse to demonstrate sustained maintenance.
The repository has 0 stars and 0 forks, with only 2 watchers. Popularity is supporting evidence rather than a verdict, but these values provide little external evidence of maturity or review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
acx/module-backend Version ^1.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.