This release appears usable and reasonably well-scaffolded, with seven releases over 213 days, a roughly 39-day median release interval, an explicit MIT license, documentation, tests, a changelog, and no install-time lifecycle scripts or registry deprecation. However, it is still a young pre-1.0 package, has only one registry maintainer, and no linked source repository was declared, which limits transparency and prevents verification of repository maintenance, provenance, and contributor depth. The dependency surface is moderate at four runtime dependencies, so adoption is reasonable with normal review and pinning, but the package does not yet demonstrate the maturity and transparency of a low-risk long-term dependency.
72%
Total Score
50
100
90
100
Only one account has registry publish access. This does not establish actual maintenance activity, but it indicates limited apparent publishing redundancy and a higher single-person continuity risk.
The current v0.5.0 release is not a stable major version, so API compatibility and long-term maturity remain less certain; it is not marked as a prerelease and recent releases are consistently non-prerelease.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
adachsoft/collection Version ^3.0 | — | — |
adachsoft/ai-tool-call Version ^2.0 | — | — |
adachsoft/command-executor-lib Version ^2.0 | — | — |
adachsoft/normalized-safe-path Version ^0.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.