This release is usable but carries meaningful maturity and continuity concerns. The package has a substantial release history, including 18 releases in the last 12 months and a latest release pushed recently, is not deprecated or archived, has an MIT declaration, and keeps runtime dependencies minimal. However, repository activity is entirely concentrated in one contributor, the repository has no tests, changelog, security policy, or security scanning, and the linked repository neither matches the package name nor mentions the package in its README, which weakens transparency and package-to-source traceability. Overall, it appears actively maintained by its owner but remains a small, lightly documented dependency that should be adopted with monitoring and careful review.
62%
Total Score
50
100
72
83
A README is present, but it is very short at 136 characters and there are no tests or changelog in either the artifact or repository. This leaves documentation and regression-coverage gaps for a database library.
The repository is owned by the user account 'afrocodeur', not an organization. Consequently, the single-maintainer and bus-factor concerns are not compensated by visible organizational backing.
All 5 recent commits came from a single contributor, giving a 100% top-contributor share. With user-owned rather than organization-backed project context, this creates a real continuity risk.
The repository recorded 5 commits in the last 3 months, all from one active maintainer. Recent activity is positive, but the modest volume limits evidence of sustained maintenance capacity.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is neutral for a small project, but it provides no evidence of community review or collaborative maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.