The project has thorough tests, clear documentation, a matching repository, and security scanning. However, it has had no commits for about 11 months, and all eight workflow actions are unpinned; the missing security policy adds a smaller transparency gap.
62%
Total Score
50
100
83
83
The repository is owned by an individual account rather than an organization, so the small apparent maintainer base offers limited visible continuity backing.
All five releases occurred in a short burst on October 8, 2025, with no later release activity over roughly 11 months. That provides little evidence of sustained maintenance.
There were zero commits and zero active maintainers in the last three months. Combined with the roughly 11-month-old last push, this is a meaningful abandonment concern.
The repository has zero stars, forks, and watchers. This is weak supporting evidence, but popularity alone does not outweigh the package's working tests and documentation.
The linked repository is not archived, although its last push was about 11 months ago, consistent with the observed maintenance slowdown.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.