This is a generally healthy and actively maintained release: version 1.7.0 is stable, the package is not deprecated or archived, releases continue regularly, and the linked repository contains substantial tests, CI, security documentation, and build tooling. The main risks are concentration in a single maintainer, the absence of packaged tests and a changelog (partly offset by repository tests and GitHub Releases), lack of automated security scanning, and several workflows with top-level write permissions. These warrant review for a production dependency but do not indicate abandonment or an otherwise unfit package.
82%
Total Score
70
100
94
80
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.