Clear licensing, tests, release notes, and workflow hygiene support adoption. The project is small and maintenance activity is currently quiet, so pin this version and watch for updates.
72%
Total Score
50
100
93
50
The repository is owned by an individual rather than an organization, so the single registry maintainer provides limited visible redundancy. This contributes modestly to bus-factor concern, alongside the quiet commit activity.
The package has 14 releases since November 2022, but only one release in the last 12 months. The recent February 2026 release provides some evidence of ongoing maintenance, though the cadence is currently low.
The repository recorded no commits and no active maintainers in the last three months, which is a meaningful maintenance warning despite the recent release and repository push evidence.
No repository security policy was found, leaving disclosure guidance undocumented. This is a minor transparency gap rather than evidence that the package is unsafe to depend on.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.