Healthy and reasonable to use, with the main caveat that it is a very young package with only two releases. The repository is active, tested, licensed, and has sensible security tooling, though its small user base provides little long-term evidence.
82%
Total Score
80
100
89
90
One registry publishing account is consistent with a personal project, while repository activity shows a second active contributor; this is adequate but not a broad maintainer base.
The registry namespace and repository are owned by the same individual, providing clear ownership but not organizational continuity.
The package is only 86 days old and has two releases, both published close together, so its long-term maintenance record is still limited.
The repository has only 1 star and no forks, so there is little community adoption evidence; this is a supporting weakness rather than evidence of abandonment by itself.
One workflow requests top-level write permissions and two workflows omit top-level permissions declarations, which is weaker least-privilege hygiene even though no dangerous workflow pattern was detected.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.