Usable with caveats: this is a clearly documented, non-deprecated extension package with a minimal dependency footprint and matching repository. It is brand new with no recorded commits yet, and its release workflow has write permissions, so adoption should wait for evidence of ongoing maintenance and review.
68%
Total Score
75
100
88
67
The package was released only once and is 0 days old, so there is no release track record or evidence yet of sustained maintenance. This is an early maturity concern rather than abandonment evidence by itself.
The repository records zero commits and zero active maintainers in the last 3 months. Because the project is only 0 days old, this is primarily an unresolved maintenance-capacity concern rather than proof that it has been abandoned.
No security policy is present, leaving reporting and response expectations undocumented. This is a transparency gap for a package that distributes a native binary.
One release workflow has top-level write permissions, which is appropriate for publishing release assets but increases the impact of a workflow compromise; the other workflow is read-only.
Version v0.1.0 is an initial non-stable-major release, which indicates an immature API and limited production history.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.