The package is only 66 days old, with three releases on the same day and five recent commits from one contributor. Readme, tests, MIT licensing, organization backing, security scanning, and read-only workflow permissions provide useful counterweight, though both workflow actions are unpinned.
68%
Total Score
67
100
86
88
At 66 days old, the package has only three releases, all published on the same day, so its maintenance history is still too short to demonstrate durable stability.
All five recent commits came from one contributor, creating a meaningful continuity risk. Organization ownership provides some handoff capacity, so this is a caution rather than a severe risk.
Five commits were made in the last three months, showing recent activity, but the activity is too limited to establish a mature maintenance cadence.
Version v0.8.2 is not marked prerelease, which is positive, but it remains below a stable 1.0 major and the package has limited release history.
The only workflow was fully analyzed, uses read-only permissions, and has no dangerous audit findings. Both of its two action references are unpinned, which leaves a modest build-integrity weakness.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
aisdk/core Version ^0.8.0 | — | — |
aisdk/openai-compatible Version ^0.8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.