Healthy and reasonable to use, with modest maintenance caveats. It has a recent release, a matching documented repository, tests and release notes, but releases are infrequent and recent commit activity is limited to a single maintainer context.
78%
Total Score
75
100
88
80
The package has existed for about 7 years, but only one release was published in the last 12 months and the median release interval is about 352 days, indicating slow maintenance.
There were no commits and no active maintainers in the last 3 months, which is a maintenance concern, although the recent release provides some compensating evidence.
The repository has no published security policy, leaving vulnerability reporting and response expectations less transparent.
The single workflow does not declare top-level token permissions, so its CI permissions are less explicit than recommended, though no write permissions were observed.
Version v0.1.5 is not a stable-major release, so the public API may still change even though it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.