This is a usable but very new v1.0.0 package with a clean MIT license, a matching repository, minimal runtime dependencies, and no install-time or workflow risks. However, it has only one release and is 0 days old, with no observed commits or active maintainers over the measured three-month window, no tests or changelog, no security policy or security scanning, and a single individual with registry publishing access. These gaps may partly reflect the package's immediate launch, but they leave maintenance maturity and long-term support largely unproven, so adoption carries moderate dependency risk.
58%
Total Score
63
100
78
90
Only one account, Dov Stone, has registry publish access. The linked project is user-owned, so there is no organizational backing shown to compensate for this narrow maintainer base.
A substantial README is present, but neither the artifact nor repository contains tests or a changelog. For a database ORM, the absence of visible tests is a meaningful maintenance and regression risk.
The source repository is owned by an individual user rather than an organization, providing no organizational continuity signal. This is consistent with the single registry maintainer and leaves bus-factor concerns unresolved.
There is only one release and the package is 0 days old, so maintenance history, compatibility evolution, and release reliability cannot yet be established.
The repository records 0 commits and 0 active maintainers over the measured three-month period. Since the package is only 0 days old, this is primarily a lack of demonstrated history, but it still leaves ongoing maintenance capacity unproven.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.