The organization-owned repository matches the package and contains a coherent implementation. A very short README, absent security scanning, and no security policy reduce transparency; pin v1.0.1 until maintenance is demonstrated.
55%
Total Score
75
69
50
No declared license, license file, or repository license file was detected, leaving the legal terms for using this dependency unclear.
The package includes a README, but it is only 13 characters long. Missing tests and changelog files are normal for a published package artifact and are not concerns here.
This is a young package with only one release, published about 282 days ago, so there is little evidence of sustained release maintenance.
There were no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance for a package with only one release.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no external adoption signal to compensate for the thin maintenance history.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.