The package has a clear license and no install-time scripts. Its documentation is largely a template, while maintenance evidence is limited to two commits from one contributor and no security policy.
58%
Total Score
50
81
75
One registry maintainer is consistent with a small user-owned project, but it leaves little publishing redundancy when combined with the single active repository contributor.
A README and changelog are present, but the README still contains placeholder text and empty usage guidance, reducing transparency for consumers.
The repository is owned by a user rather than an organization, so the concentrated contributor activity is less readily offset by institutional maintenance capacity.
The package is only 46 days old and has one release, so there is little release history from which to judge sustained maintenance or compatibility.
One contributor holds 100% of the two commits from the last 3 months, creating a clear single-maintainer continuity risk without organizational backing.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.