The package includes a useful README and no install-time scripts, but it lacks a license and security policy. Its small repository has little visible activity or adoption evidence.
44%
Total Score
67
72
50
No declared license or license file was found, leaving developers without clear permission to use, modify, or redistribute the package.
The registry namespace and repository owner match, but the owner is an individual account rather than an organization, providing limited evidence of institutional backing.
The package has only one release, published about 385 days ago, with no releases in the last 12 months; this provides little evidence of ongoing maintenance.
There were no commits or active maintainers in the last three months, which is concerning for a package with only one release and no demonstrated maintenance cadence.
The repository name does not match the package name and its README does not mention the package, raising concern that the linked source may not clearly belong to this release.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.