Clear documentation, tests, release notes, and a minimal dependency footprint support adoption. Workflow controls and security tooling are solid, though the project lacks a security policy and recent work comes from one contributor.
82%
Total Score
67
100
100
83
The package and repository are owned by the same individual account, so there is no organization backing to offset the concentrated maintainer base.
One contributor made all 6 commits in the last 3 months, concentrating maintenance knowledge and creating a real continuity risk.
No repository security policy was found. This is a transparency gap, although the repository's separate security scanning tools partly compensate for the missing process documentation.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.