This release appears to be a healthy, actively maintained package with strong repository transparency and operational hygiene. It has a stable release profile, regular releases over 151 days, recent repository activity, tests, a changelog, a license file, security policy, dependency scanning, and restrictive workflow permissions. The main concern is maintainer concentration: 48 of 49 commits in the last 3 months came from one of two contributors, and the package is still relatively young, so continuity depends heavily on the primary maintainer. Overall, it is a reasonable dependency for developers who can accept that bus-factor risk.
84%
Total Score
70
100
100
100
Only one registry account has publishing access. That is a modest publishing continuity concern, though repository activity provides additional evidence of ongoing maintenance.
The repository is owned by an individual user rather than an organization, so there is no organizational handoff capacity to offset the concentrated contributor activity.
Commit activity is highly concentrated: the top contributor made 48 of 49 recent commits, leaving substantial continuity risk despite one additional active contributor.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.