This is a usable, established package with a stable v8.0.0 release, six releases in the last 12 months, no registry deprecation, and a linked repository that is not archived and was pushed recently. Its small, single-maintainer footprint, zero repository commit activity in the last three months, lack of tests and documentation, and absence of security scanning reduce transparency and long-term maintenance confidence; however, the package is a compact collection of coding-standard configuration files, so the missing tests and README are less concerning than they would be for a runtime library. Dependence is reasonable with normal review of future releases, but it is not as robustly maintained or documented as a high-confidence dependency.
72%
Total Score
50
83
90
Only one registry maintainer is listed. The package has a matching personal repository rather than organization backing, so this creates a genuine bus-factor and continuity concern despite the recent release history.
The artifact and repository contain no README, tests, or changelog. For a small coding-standard configuration package, missing tests are partly expected, but the absence of documentation and repository tests still reduces transparency.
The source repository is owned by a personal user account (astehlik), not an organization. Combined with one registry maintainer, this leaves limited visible institutional backing.
There were 0 commits and 0 active maintainers in the last three months. This conflicts with the recent registry release activity and weakens evidence of ongoing source-level maintenance.
The repository has 0 stars and 0 forks, with 1 watcher. Popularity is supporting evidence rather than a verdict, but these low adoption signals provide little external validation.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.