Usable with caveats: it is actively releasing and the repository is current, but this is a young pre-1.0 package maintained by one contributor with no tests, changelog, or security policy. Review changes carefully before relying on it in production.
68%
Total Score
70
100
78
90
One registry publisher is consistent with the matching user-owned repository, but it leaves limited publishing redundancy if that maintainer becomes unavailable.
The package has a substantial README, but neither the artifact nor repository includes tests or a changelog. For an HTTP client with many API operations, the lack of visible tests is a real maintenance concern.
One contributor made all six commits in the last three months, creating a thin maintenance base and meaningful continuity risk for this user-owned project.
There are no open issues or pull requests and no recent issue activity. This avoids an unresolved backlog, but provides little evidence of community review or support.
The repository has zero stars, forks, and watchers. This is weak supporting evidence and suggests limited external validation, but popularity alone is not a health verdict.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.