The package has no install scripts and only one runtime dependency, keeping its build and adoption simple. Its stable release and release notes help, but the project shows little demonstrated depth or ongoing care.
42%
Total Score
50
100
67
100
No license declaration or license file was found, leaving usage and redistribution rights unclear for a dependency.
The artifact has no README, tests, or changelog, although release notes exist for version 2.0.0. The release notes provide some documentation, but the absence of consumer-facing guidance and tests remains a meaningful gap for a library.
The package has only two releases, both published within minutes on the same day, with no later release activity over roughly seven months; this indicates limited maturity and maintenance evidence.
The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance.
The repository name does not match the package name, and no README package mention was found, so the linked source may not clearly document ownership of this package.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.