This is a promising but very new package rather than an established dependency. It has a clear MIT license, tests and changelog in both the artifact and repository, a complete-looking 32-file tree, no install-time lifecycle scripts, stable v1.0.0 packaging, and a recently updated non-archived repository. However, the package is only 12 days old with two releases, has no observed repository popularity or issue activity, lacks security scanning and a security policy, and its workflow does not declare top-level token permissions. The available evidence supports cautious adoption, preferably with version pinning and review of the code, but does not yet demonstrate long-term maintenance maturity.
68%
Total Score
50
100
83
80
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.