The MIT license, matching repository, and documented release history support basic transparency. One maintainer, one star, and no security policy leave limited evidence of ongoing stewardship.
55%
Total Score
33
100
75
50
The latest release was in September 2023, with no releases in the last 12 months, indicating prolonged release inactivity. The package has 17 releases overall, but that history does not offset the current gap.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the prolonged release gap and raising abandonment concerns.
One registry maintainer is consistent with an individually owned project, but it provides limited redundancy if that maintainer stops responding or publishing updates.
The source repository is owned by an individual rather than an organization, so there is no organizational backing to offset the thin maintainer and activity signals.
The repository has 1 star, 0 forks, and 1 watcher, providing very little independent evidence of adoption or community support. Low popularity alone is not disqualifying, but it leaves the single-maintainer project with little visible backing.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.