Healthy and actively maintained, with clear licensing and frequent releases. The main concerns are that one person made all recent commits and the repository lacks tests, a security policy, and uses write-enabled workflow permissions.
78%
Total Score
70
100
83
80
Only one registry account has publishing access. This is a real continuity concern, although the repository's recent activity shows that the maintainer is actively publishing and contributing.
A substantial README and changelog are present, and the repository uses GitHub Releases, which supports transparency. Tests are absent from both the package and repository, leaving validation coverage unclear.
The package and repository are owned by the same individual account rather than an organization, so there is no organizational maintenance buffer to offset the concentrated contributor base.
All 148 recent commits came from one contributor, so maintenance depends heavily on a single person. The high recent activity compensates for abandonment concerns only partially.
The repository has only 4 stars, 1 fork, and 1 watcher. This provides little external validation, but popularity is supporting evidence rather than a requirement for a small, active package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twbs/bootstrap Version ^5.3 | — | — |
twbs/bootstrap-icons Version ^1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.