The source repository includes tests and a changelog, and the package has a clear MIT license with no install-time scripts. Its small user-owned maintainer base and unpinned CI actions leave meaningful maintenance and build-integrity concerns; pin 2.0.2 if adopting it.
72%
Total Score
63
100
83
75
The package and repository are owned by the same individual user, confirming ownership consistency but providing no organization-level maintenance redundancy.
The package has existed for about 4 years, but only six releases and one release in the last 12 months indicate a slow release cadence. The latest release was about 1 month ago, which provides some evidence of current maintenance.
One contributor made 100% of the recent commits. Because the project is user-owned rather than organization-owned, there is no provided backing evidence to offset this concentration.
The repository recorded 8 commits in the last 3 months, showing recent work. However, all activity came from one maintainer, so maintenance capacity remains limited.
The repository has 1 star, 0 forks, and 1 watcher. This indicates limited adoption, but popularity is supporting evidence and does not outweigh the observed recent activity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.