The codebase is extremely small, with only a brief README and no tests or security policy. Its clean dependency profile and absence of install scripts reduce operational exposure, but do not offset the maturity concerns.
38%
Total Score
50
100
50
75
No declared license, license file, or repository license file was detected, leaving the terms for using and redistributing this package unclear.
A README is present, which provides basic consumer guidance, but it is only 52 characters long and the package and repository have no tests or changelog. The missing tests and changelog are normal packaging practice, while the minimal documentation limits transparency.
The package is only 44 days old and has two releases, both published within roughly two minutes, so there is little evidence of sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months; because the project is only 44 days old, this still indicates an unproven maintenance cadence.
The repository name does not match the package name and its README does not mention the package, so the source-package relationship is not clearly demonstrated.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.