This release appears actively maintained and generally suitable to evaluate as a dependency: it has 12 releases over 188 days, the latest release is recent, the repository is not archived, and it has substantial recent commit activity from two contributors. The package is well documented and the repository contains tests, CI, release, and Docker workflows, while the MIT license and lack of install-time scripts reduce adoption risk. The main concerns are its very early 0.0.x maturity, low repository popularity, reliance on a small contributor base with one contributor responsible for about 72% of recent commits, and incomplete security hygiene, including no security policy and permissive or unspecified workflow token permissions. These warrant review and monitoring rather than ruling out the package.
78%
Total Score
60
50
83
80
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
react/http Version ^1.11 | — | — |
react/async Version ^4 | — | — |
symfony/console Version ^8.0 | — | — |
yethee/tiktoken Version ^1.0 | — | — |
opis/json-schema Version ^2.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.