Usable with caveats: the package is actively being developed and is not deprecated or archived, but it is only 2 days old, has no tests or documentation, and all recent commits come from one contributor. Treat it as an early-stage dependency until it demonstrates longer-term stability.
58%
Total Score
50
100
72
90
The artifact and repository contain no README, tests, or changelog; the presence of GitHub Releases partly compensates for the missing changelog, but the lack of tests and documentation remains a maintenance and adoption concern.
The registry namespace and repository are owned by the same individual user, providing direct ownership alignment but no organizational backing or maintenance handoff capacity.
The package is only 2 days old, despite having 6 releases in that period, so there is not yet enough history to demonstrate durable maintenance or stability.
One contributor made all 19 recent commits, creating a concentrated maintenance dependency with no demonstrated backup maintainer.
The repository has 19 commits in the last 3 months, all within the package's 2-day observed history; this shows active development but not sustained maintenance over time.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.