68%
Total Score
caution
Usable with caveats: recent releases and tests help, but maintenance activity is sparse.
The registry namespace and repository are owned by the same individual account, so the package has direct ownership alignment but no organizational backing indicated by the provided evidence.
The package has existed for about 8 years with 10 releases, but only one release in the last 12 months and a median interval of about 254 days indicate a slow cadence.
The repository recorded zero commits and zero active maintainers in the last three months. A release was published during that period, but the lack of observed commit activity still limits evidence of ongoing maintenance.
The repository has 4 stars, 8 forks, and 1 watcher. This is a small footprint, but popularity is supporting evidence and does not outweigh the package's tests and recent release.
No security policy is present, which weakens vulnerability-reporting transparency for a package maintained by a single user-owned project.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.