It has a clear MIT license, focused dependencies, tests, release notes, and organization-backed source repository. The lack of security scanning and low repository activity warrant checking future maintenance before upgrading.
68%
Total Score
63
100
83
75
Only one account has registry publish access. The organization-backed repository provides some compensation, but the narrow publishing base still limits resilience.
The package has existed since August 2015 with seven releases, but no releases appeared in the last 12 months and the median interval is about 447 days, indicating a slow cadence.
The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence of ongoing maintenance after the latest release.
There is one open issue and no recent issue or pull-request activity; this is a modest maintenance concern but not evidence of abandonment by itself.
The repository has nine stars and six forks, indicating a small project footprint; popularity is supporting evidence and does not outweigh its maintenance signals.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.