This is a well-documented, actively maintained release with strong repository and artifact hygiene: it includes tests, a changelog, licensing, security documentation, read-only CI permissions, dependency scanning, and no install-time lifecycle scripts. The package has a healthy recent release cadence and substantial recent commit activity, and it is neither deprecated nor archived. The main dependency risk is concentration: all 69 commits in the last 3 months came from one contributor, and the project is relatively young at 145 days old with a pre-1.0 version, so long-term continuity and API stability are less established than for a mature project.
82%
Total Score
60
100
94
100
Only one registry account has publish access. This is not evidence of inactivity by itself, but it leaves publishing continuity dependent on a single person.
The repository is owned by an individual user rather than an organization, so there is no explicit organizational backing to compensate for the concentrated maintainer and contributor base.
One contributor made 100% of the 69 commits in the last 3 months. Because the repository owner is an individual rather than an organization, there is no organizational backing signal to offset this single-maintainer dependency.
The repository recorded 69 commits in the last 3 months, showing strong recent activity. However, all activity came from one active maintainer, so the positive maintenance signal is tempered by concentration risk.
Version 0.6.1 is not a prerelease and recent releases contain no prerelease versions, but the pre-1.0 major version still leaves API stability less established than a stable-major package.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.