Usable with caveats: the repository is active, licensed, security-conscious, and has tests, but this is a same-day first release with only one recent contributor and limited release history. Reassess after more releases and broader maintenance activity.
68%
Total Score
80
100
88
90
The artifact includes a substantial README, while repository tests compensate for tests not being packaged. Neither the artifact nor repository has a changelog, which is a minor transparency gap for a new runtime package.
This is the package's first release, published on the assessment date, so there is no track record for release cadence or sustained maintenance.
One contributor made 100% of the recent commits. Organization ownership offers some handoff potential, but no second active contributor is evidenced yet.
Only one commit was recorded in the last three months, all on the assessment date, so sustained maintenance capacity is not yet demonstrated.
Four of five workflows lack top-level permissions declarations, although none grants top-level write access and one uses read-only permissions. Explicit least-privilege declarations would improve workflow hygiene.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.