It has a clear README, changelog, release notes, and no install-time scripts. The license mismatch and lack of security policy add modest transparency concerns.
68%
Total Score
67
75
75
The artifact contains a license file, but it is detected as MIT-0 while the manifest declares MIT; the mismatch should be clarified before relying on the stated terms.
The repository is owned by an individual user rather than an organization, so the single-maintainer concentration is not offset by visible organizational backing.
The package is only 87 days old with two releases, so its maintenance record is still limited, though releases occurred about 16 days apart.
All 11 recent commits came from one contributor, leaving the project dependent on a single maintainer for continuity.
The repository has no stars, forks, or watchers. Popularity is supporting evidence rather than a verdict, but there is no external adoption signal here.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.