Usable with caveats: it has recent releases, an active source repository, and clear MIT licensing, but maintenance evidence is thin. No commits or issue resolution in the last three months, no tests, and a one-person project make long-term support uncertain.
58%
Total Score
50
50
79
90
The package has four runtime dependencies, including three project-specific packages; this is not excessive, but it creates several linked maintenance surfaces for a small library.
One registry publisher is consistent with a small user-owned project, but it leaves little apparent publishing redundancy or maintainer capacity.
A README is present, but the artifact and repository contain no tests or changelog. For an ORM library, the absence of visible tests is a meaningful maintenance and regression risk.
The registry namespace and repository owner match, and the owner is a user account rather than an organization. This supports ownership continuity but offers limited institutional backing.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although recent releases and a recent push provide some counterevidence, the current development activity is a notable support risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hexmakina/traitor Version 0.2.0 | — | — |
hexmakina/crudites Version 0.1.* | — | — |
hexmakina/black-box Version 0.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.