This is a well-scaffolded, transparent, actively published early-stage package with a matching repository, tests, changelog, security policy, license, and no registry deprecation or archived-repository warning. The main adoption risks are its very short 23-day history, pre-1.0 version, single maintainer and concentrated commit activity, low repository adoption, and limited CI hardening; these indicate maintenance and continuity risk rather than an immediate unfitness to depend on it.
78%
Total Score
60
100
78
90
Only one registry account has publish access. This is a continuity concern for an individually owned project, although it is partly supported by the active repository signals.
The repository is owned by the individual user croustibat, not an organization, so there is no organizational maintenance capacity to offset the single-maintainer and bus-factor concerns.
The package is only 23 days old with two releases and a median release interval of about 24 days. This shows recent activity but provides little long-term evidence of maintenance stability.
One contributor made all three recent commits, giving the repository a complete short-term contributor concentration. Because the owner is an individual rather than an organization, there is no project-backing evidence to compensate for this bus-factor risk.
There were three commits in the last three months and one active maintainer, showing recent work but only a small observed maintenance record.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.