The MIT license is explicit and the artifact is small and focused. The missing source visibility leaves maintenance and build provenance unverified.
68%
Total Score
50
100
88
100
Only one registry account has publish access. That does not prove poor maintenance, especially given the recent release history, but it leaves limited visible publishing redundancy.
Version 0.6.0 is not a stable major release, so consumers may face breaking changes within the 0.x series. It is not a prerelease, which partly offsets that concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.