This is a generally usable and actively maintained release from an organization-backed project: it has 36 releases over roughly 4 years, five releases in the last 12 months, a stable non-prerelease version, a current repository push, and no registry deprecation. The main concerns are that recent repository activity is very thin and concentrated in one contributor, the artifact and repository contain no tests or changelog, the repository has no security policy or security scanning, and the project has little visible community traction. The proprietary license is explicit, so it is not a licensing-transparency gap, but it may impose adoption restrictions that should be reviewed separately.
72%
Total Score
70
100
83
90
A substantial README is present, but neither the artifact nor repository has tests or a changelog. For a binary-backed library this is a genuine transparency and verification gap, though the documentation partly compensates for the missing changelog.
All 1 recent commit came from a single contributor, producing a 100% top-contributor share. Although the organization ownership provides some ability to hand maintenance off, no second active contributor is shown, so the recent activity still has a thin bus factor.
Only 1 commit was recorded in the last 3 months, despite the recent release activity. This suggests limited observable source activity and lowers confidence in ongoing maintenance capacity.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is not inherently unhealthy for a vendor-maintained library, but it offers little evidence of active community engagement.
The repository has 1 star, 0 forks, and 12 watchers, showing very limited public adoption. Popularity is supporting evidence rather than a verdict, but these values provide little external validation.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.