The small repository has no tests or security scanning, limiting confidence in future changes. Its MIT license, matching source tree, clear README, and lack of install scripts provide useful transparency.
58%
Total Score
50
83
83
One registry maintainer provides a thin publishing base, with no provided evidence of a broader maintenance team to compensate for inactivity.
The registry namespace and repository owner match, but the owner is an individual account rather than an organization, offering limited visible backing.
The package has had only two releases, both in October 2023, with no release in nearly three years. That strongly suggests abandonment risk despite the stable 1.1.0 version.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance activity.
Five stars and two forks indicate limited community adoption. This is supporting evidence rather than a decisive concern for a small, focused library.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.