Usable with caveats: the package is stable, clearly backed by the dxw organization, and has strong basic repository hygiene. However, the registry has seen no release in over three years and the repository shows no commits in the last three months, so future maintenance is uncertain.
72%
Total Score
75
100
94
80
The package has seven releases over roughly ten years, but no release in the last three years; this is a meaningful maintenance concern for a dependency even though the project is established.
No commits or active maintainers were recorded during the last three months. This conflicts somewhat with the recent repository push and leaves current maintenance capacity uncertain.
No security policy was found. This is a transparency gap, although the small package's security-scanning tools provide some compensating evidence.
The workflow does not declare top-level token permissions. It does not request top-level write access, but explicit least-privilege permissions would be clearer.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.