This release presents a strong overall dependency-health profile: it is actively released, backed by a matching and well-documented source repository, has extensive tests and a changelog, uses a BSD-3-Clause license, has no deprecation status or install-time scripts, and shows substantial recent commit and pull-request activity. The main concerns are that version 0.6.2 is still pre-1.0 and all 77 recent commits came from one contributor, which creates maturity and bus-factor risk; the package is also only 106 days old. These concerns warrant monitoring, but the repository's active maintenance, security controls, and comprehensive artifact structure make it reasonably safe to adopt with normal pre-1.0 dependency caution.
84%
Total Score
70
100
89
100
Only one registry account has publish access. This is not by itself evidence of poor health, but it adds publishing continuity risk because the repository owner is an individual rather than an organization.
The source repository is owned by an individual account, so there is no organization-level maintenance handoff evidence to offset the concentrated contributor base.
All 77 recent commits came from one contributor, creating a genuine continuity and abandonment risk despite the high activity level.
The repository has 17 stars and no forks, indicating limited adoption evidence, but popularity is supporting evidence and does not outweigh the strong activity signals.
Version 0.6.2 is not a stable major release, so API and behavior compatibility may still change, although it is not marked as a prerelease and recent prerelease share is 0%.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.