Its README, MIT license, and simple dependency footprint make the package easy to assess. Recent activity is real, but one person owns all recent commits and no security policy is provided.
68%
Total Score
50
100
88
50
All recent commits came from one contributor, leaving maintenance dependent on a single person despite the recent activity.
Two commits in the last three months show that the project is not dormant, but the activity level is modest for a maintained library.
The repository has no security policy, reducing transparency about how users should report vulnerabilities and how security issues are handled.
Version 0.1.0 is not a prerelease, but remaining at an early major version limits evidence of long-term API maturity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.