Usable with caveats: it is a small, clearly licensed package with tests, documentation, and a matching repository, but it is only 146 days old and has had just two releases. Recent commit activity is absent, and the repository has no security policy or scanning setup.
68%
Total Score
63
100
83
90
One registry publishing account is consistent with an independently maintained package, though it leaves little redundancy if that maintainer becomes unavailable.
The registry namespace and repository are owned by the same individual account, providing direct ownership alignment but no organizational backing or maintainer redundancy.
The package is only 146 days old and has released twice, with a median interval of about 147 days; this provides limited evidence of sustained maintenance.
The repository recorded zero commits and zero active maintainers during the last three months. Although it was recently pushed, the short history and lack of sustained commit activity raise maintenance risk.
The repository has zero stars, forks, and watchers. This does not establish a defect, but it provides no supporting evidence of external adoption or review.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.