Its repository matches the package and is backed by an organization, while the artifact includes a README. The lack of tests and security policy matters less for a deliberately minimal test fixture, but limit use to that role.
60%
Total Score
100
80
83
No license declaration or license file was detected in the package or repository. Without licensing terms, dependency use has a material legal and transparency gap.
The package has had no releases in the last 12 months, and its latest release was published in May 2022. That long inactivity lowers confidence in ongoing maintenance, even though the package appears intentionally small.
The repository has no security policy. This is a modest transparency gap, though the package's deliberately narrow test-fixture purpose limits the practical impact.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.