The package includes a matching MIT license, documentation, tests, and a small dependency footprint. Its workflow leaves all three actions unpinned, and the repository lacks security scanning; the low-confidence cache warning is a minor additional concern.
62%
Total Score
50
100
83
75
The registry namespace and repository are owned by the same individual account, so ownership is consistent. Individual ownership provides less visible organizational maintenance capacity than a backed project, but the maintainer list alone is not decisive.
The package is young at 231 days old and has four releases, all within the last 12 months, with a median interval of about 1 day. This shows initial release activity but provides limited long-term maintenance history.
There were zero commits and zero active maintainers in the past three months. For a package only 231 days old, this is a meaningful maintenance concern.
There are no open issues or pull requests and no issue or pull-request activity in the past month. This is neutral rather than evidence of active maintenance, because it may reflect a small project with little reported demand.
The repository has 12 stars, 4 forks, and 2 watchers. This is modest supporting evidence and does not materially offset the lack of recent commits.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.