This release is usable but has meaningful transparency and maintenance-evidence gaps. It has a stable major version, 25 releases over roughly 3.4 years, two releases in the last year, an MIT license, a small runtime dependency surface, and no install-time lifecycle scripts. However, the package has no declared source repository, contains no tests or changelog in the artifact, and the available README is only a short TODO-style note, leaving limited evidence of ongoing quality practices and project backing. I would consider it for a narrowly scoped dependency, but would want to review the source and establish an internal fallback before relying on it broadly.
68%
Total Score
100
80
100
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.