This is a very new, single-release v0.1 package with no demonstrated release or commit history, so its long-term maintenance and maturity remain unproven. The repository is active in the sense that it is not archived and was recently pushed, and the package has a matching, licensed source repository, a changelog, examples, and no install-time scripts. However, the absence of tests, security scanning, and a security policy, together with zero observed popularity and contributor activity, warrants caution before adopting it as a dependency; reassess after it develops a track record.
58%
Total Score
50
100
72
90
A README, changelog, and GitHub Releases support basic project transparency, but both the artifact and repository lack tests; for a GUI library this leaves behavior and regression coverage unverified.
The repository is owned by an individual user rather than an organization, and the available evidence does not show broader project backing; this leaves a thin ownership base for a new package.
The package is 0 days old with only one release and no established release cadence, so maintenance maturity cannot yet be demonstrated.
There were zero commits and zero active maintainers in the last three months. Because the package is only 0 days old, this primarily reflects the absence of a maintenance track record rather than confirmed abandonment.
There are no issues or pull requests and no activity in the last month; given that the repository is newly created, this is inconclusive but provides no evidence of an established support process.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.