The package has a clear GPL-3.0-or-later license and a recent GitHub release documenting a change. Its small maintenance footprint and absent security policy warrant caution; pin version 1.0.3.
65%
Total Score
67
100
92
75
The artifact lacks a README, tests, and changelog, which limits consumer guidance and verification, but the exact release has GitHub release notes documenting its change.
One contributor made all commits in the last three months, creating a concentrated maintenance dependency; organization backing provides some handoff capacity.
Only one commit was recorded in the last three months, which is limited evidence of ongoing maintenance for a package with active releases.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.