The repository is organized, tested, and clearly tied to the package, with no install-time scripts. Its single young release, mixed license markers, and lack of a security policy leave maturity and licensing clarity below the level of an established dependency.
68%
Total Score
75
83
The package declares MIT and includes a license file, but the artifact also identifies CC-BY-4.0, so the scope of the detected licensing is not completely clear.
This is the package's only release, published about 166 days ago, so there is little release history to demonstrate sustained maintenance.
The linked repository has no security policy, which is a transparency gap for a package intended to be consumed across several ecosystems.
The package is still at v0.1.0 and has no later stable major release, which is reasonable for a new toolkit but leaves its API and maintenance trajectory unproven.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.