The package includes tests, release notes for this version, a clear license, and very few runtime dependencies. Its 0.x status and absent security policy leave less evidence of long-term stability.
62%
Total Score
50
100
88
83
The repository and registry are owned by the same individual, so the package identity is clear, but there is no organization backing shown to provide broader maintenance capacity.
The package is about 555 days old with 20 releases, but only one release appeared in the last 12 months. That recent slowdown is a maintenance concern, though the release history is not otherwise sparse.
The repository recorded zero commits and zero active maintainers during the last three months. This is direct evidence of stalled recent maintenance and raises abandonment risk.
There are no open issues or pull requests and no issue or pull-request activity in the last month. The clean queue is positive, but the lack of activity provides little evidence of ongoing support.
The repository has no security policy. For an extension that instruments applications and handles telemetry, this reduces transparency about vulnerability reporting and response.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.