This release appears reasonably healthy for adoption: it has a permissive MIT license, a substantial and coherent package artifact with README, changelog, configuration files, source code, and tests, no install-time lifecycle scripts, a light runtime dependency profile, and frequent recent releases. The main limitations are that v0.7.1 is not yet a stable major release and no source repository is declared, reducing transparency and preventing assessment of repository maintenance, provenance, and contributor activity. It is a plausible dependency, but adopters should expect some API evolution and may want to verify the package source and release process independently.
78%
Total Score
50
100
90
100
Two registry accounts are listed with publishing access, suggesting some administrative redundancy, but this is only access metadata and does not establish active maintenance capacity.
The assessed version v0.7.1 is not a stable major release, so consumers should allow for breaking changes under the package's versioning stage; it is not marked as a prerelease and recent releases contain no prereleases.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.