The package includes clear documentation, tests in the repository, a changelog, and a matching MIT license. Its brand-new 0.2.0 release, single maintainer, absent security scanning, and unpinned workflow actions leave limited maturity evidence.
72%
Total Score
63
100
78
75
One registry maintainer is consistent with a personally owned project, but it provides limited redundancy if that maintainer becomes unavailable.
Only two releases exist and the package is less than a day old, so there is not enough history to demonstrate sustained maintenance; the recent second release is some evidence of active initial development.
No commits or active maintainers were recorded in the last three months, but the package is less than a day old, so the metric mainly reflects insufficient history rather than a demonstrated collapse.
There are no issues or pull requests and no recorded activity in the last month; given the repository is newly created, this offers little evidence of community support rather than proving abandonment.
The repository has zero stars, forks, and watchers. This is weak supporting evidence, though the package is brand new and popularity is not decisive.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.