The repository includes tests, the package has a clear GPL-3.0-or-later declaration, and its two-extension dependency set is small. A single maintainer and limited repository activity leave less evidence of ongoing support.
55%
Total Score
67
100
90
75
One registry maintainer provides a thin publishing base, although the organization-owned repository offers some backing that partly offsets this concern.
This is a mature package, but it has only one release and no release in about seven years, which is a meaningful maintenance concern.
The repository recorded no commits and no active maintainers in the last three months; combined with the old release, this suggests support may have stalled.
No repository security policy was found, leaving a transparency gap, though the package's small scope and lack of observed workflow activity limit its weight.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.