Its 12-character README, absent tests, and missing security policy leave little consumer or maintenance transparency. MIT licensing and a clean workflow audit help, but one workflow uses an unpinned action with broad write permissions.
44%
Total Score
0
63
75
The package is about 416 days old but has only three releases, all within the first few weeks, and no releases in the last 12 months. This suggests activity stopped soon after initial publication.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with more than a year without observed updates. That materially increases abandonment risk.
The package includes a README, but it is only 12 characters long, providing almost no integration guidance. Missing tests and a changelog are normal for published artifacts and are not concerns here.
The repository name does not match the package name and its README does not mention the package. This weakens confidence that the linked source repository directly belongs to this release.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no community signal to offset the inactivity concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hongyi/designer Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.