Usable with caveats: this is a transparent, newly published accelerator with a clear README, matching repository, and active release automation. It has no demonstrated maintenance history yet, so treat it as an early-stage dependency and verify compatibility with the narrowly supported platform.
64%
Total Score
75
100
86
80
The package is brand new, with one release published today and no established release cadence. This is a maturity gap, although the companion package's documented release contract provides useful context for the initial publication.
There were no commits and no active maintainers in the last 3 months, but the repository and release are less than a day old. The absence is therefore primarily lack of history rather than evidence of an abandoned established project.
No repository security policy was found, leaving disclosure and vulnerability-handling expectations unspecified. This is a genuine transparency gap, though the project is a small, newly published extension shell.
One workflow has top-level write permissions, while the other is read-only. Write access is relevant to a release workflow but is broader than a purely read-only configuration, so it adds a modest supply-chain hygiene concern.
Version v0.1.0 is not a stable major release, indicating an early API and compatibility stage. It is not marked as a prerelease, which partly offsets the concern but does not provide evidence of long-term stability.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.