The package includes substantial documentation, tests, a license file, and a stable release format. Its small publisher base and absent security policy leave limited oversight, while the license metadata does not agree with the MIT license in the artifact.
62%
Total Score
50
93
75
The artifact contains an MIT license file, but the manifest declares the package proprietary; this mismatch creates avoidable licensing uncertainty rather than indicating that the release is unlicensed.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance concern despite the repository not being archived.
No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.