Clear documentation, tests, and a recent release make the library easy to evaluate. Long gaps between releases and all recent commits coming from one contributor leave limited maintenance depth.
68%
Total Score
50
75
50
The package has only 3 releases since 2018, with a median interval of about 3 years 7 months; one release in the last 12 months shows activity but not a strong cadence.
One contributor made 100% of the last 3 months' commits, so maintenance depends entirely on a single person.
The repository had 2 commits in the last 3 months from 1 active maintainer, which shows current activity but limited maintenance capacity.
The repository has no security policy, leaving no documented process for reporting or handling security issues.
The sole workflow was fully analyzed with no dangerous triggers or audit findings, but all 3 action references are unpinned, leaving them exposed to upstream reference changes.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.