The package includes tests, release notes, a clear README, and a security policy. Its organization backing helps, but the project is only 60 days old and all recent commits come from one contributor; workflow actions are also unpinned.
70%
Total Score
67
100
86
100
The package is only 60 days old and has two releases, so there is limited evidence of long-term maintenance or release discipline.
One contributor made all recent commits, creating a concentrated maintenance risk; organization ownership partly compensates by allowing work to be handed off.
Two commits in the last three months show some activity, but only one active maintainer provides limited evidence of sustained maintenance capacity.
Version v0.8.1 is not a prerelease, but the package remains below a stable major version, so its API may still change materially.
The only workflow was fully analyzed, uses read-only permissions, and has no dangerous audit findings; however, both of its two action references are unpinned, weakening build reproducibility.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
aisdk/core Version ^0.8.0 | — | — |
aisdk/openai-compatible Version ^0.8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.