The package includes a clear license, README, tests, and release notes. Its small dependency set and lack of install scripts reduce routine adoption risk, but longer-term maintenance is not yet established.
68%
Total Score
67
100
90
75
The registry namespace and repository are owned by the same individual, so package ownership is consistent. There is no organizational backing shown to offset the concentrated maintainer activity.
The package is only 52 days old and has three releases, all published within roughly two days. This shows early activity but provides little evidence of sustained maintenance.
Two contributors were active, but one accounts for 87.5% of recent commits. That concentration creates a moderate continuity concern, partly offset by the second active contributor.
The repository has no security policy. For a library that processes personal identity data formats, this reduces transparency around vulnerability reporting, though it is not evidence of a vulnerability.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.