Documentation, tests, licensing, and security processes are in place, with organization backing and a small dependency surface. The project is still early and maintenance is concentrated in one contributor, so long-term continuity is not yet established.
68%
Total Score
67
100
86
100
The package is only 67 days old and has one release, so its maintenance record and compatibility history are still limited.
All three recent commits came from one contributor, creating a clear continuity risk; organization backing provides some capacity to hand maintenance off but does not show that a second contributor is active.
Three commits occurred in the last three months, showing some activity, but the volume is limited for a recently published package.
Version v0.8.0 is not a stable major release, which leaves more room for breaking changes despite it not being marked prerelease.
The workflow uses read-only permissions and has no detected injection or high-severity findings, but both action references are unpinned, weakening build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
aisdk/core Version ^0.8.0 | — | — |
aisdk/openai-compatible Version ^0.8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.