Usable with caveats: the package is actively released, licensed, and backed by a matching repository with tests and automated tooling. Maintenance depends on one publisher, with no commits in the last three months and limited repository activity.
68%
Total Score
63
89
80
Only one registry account has publish access, creating a resilience and bus-factor concern. The repository is user-owned rather than organization-backed, so there is no provided ownership evidence to offset it.
The registry namespace and repository owner match, and the owner is an individual user. This supports ownership continuity but provides less organizational continuity than an organization-backed project.
The package is more than three years old with six releases and one release in the last year. The recent release supports ongoing availability, but the sparse long-term cadence limits maturity evidence.
There were zero commits and zero active maintainers in the last three months, which weakens evidence of sustained maintenance even though the repository was pushed recently and a release was published.
The repository has zero stars and forks and only one watcher, so there is little external adoption evidence. Popularity is supporting evidence rather than a decisive health measure for a small plugin.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.