Documentation, release notes, repository tests, and a security policy provide useful transparency. The workflows are fully analyzed but use 20 unpinned actions, and the project has no second active contributor yet.
66%
Total Score
50
86
83
The repository is owned by a user account rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.
The package is only 3 days old, with 4 releases and a median interval of about 1 day. This shows active initial work but provides little evidence of long-term stability.
One contributor made 100% of the 139 recent commits. That leaves the project dependent on a single person for ongoing maintenance and review.
The repository recorded 139 commits in the last 3 months, all from one active maintainer. The activity is strong, although its concentration limits evidence of durable maintenance capacity.
Version v0.4.0 is a non-prerelease 0.x release, but the major version is not stable and the README explicitly says the API may still change.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.