The repository includes tests, a substantial README, and a matching package identity. The single-contributor project and fully unpinned workflow actions leave meaningful continuity and build-integrity concerns.
65%
Total Score
70
100
83
75
Only one registry account has publish access. This is consistent with the user-owned repository but still leaves limited publishing redundancy.
The repository is owned by an individual user rather than an organization, so the single-maintainer and bus-factor concerns are not offset by visible organizational backing.
The package has 40 releases over about 23 months, but only one release in the last 12 months, indicating a sharp slowdown after an initially active period.
All 12 recent commits came from one contributor, leaving no demonstrated handoff capacity if that maintainer becomes unavailable.
The repository has no stars or forks and one watcher. Popularity is only supporting evidence, but these low counts provide little external validation.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.