Usable with caveats for an early-stage dependency. It has clear licensing, documentation, tests, release notes, and organization backing, but this is its first release and there has been no commit activity for about three months, with limited security-process evidence.
65%
Total Score
75
100
78
80
Only one registry publishing account is listed, which is a limited operational base, although the organization-backed repository provides some compensation.
This is the only release, published about 97 days ago, so there is not yet enough release history to demonstrate sustained maintenance.
There were no commits and no active maintainers during the last three months, which raises a maintenance and abandonment concern for a project that has only one release.
The repository has no stars, forks, or watchers, limiting community validation, but the package is new and organization-backed, so this is supporting evidence rather than a decisive concern.
The project uses build tooling, but no security-scanning tools were detected, leaving a modest transparency and process gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.