The package includes tests, a useful README, release notes, and a clear license. Its recent maintenance rests on one contributor, while the workflow uses two unpinned actions and has no security policy.
68%
Total Score
60
100
83
75
Only one registry account has publishing access. That is a modest resilience concern for an independently owned project, although repository activity confirms the same maintainer is active.
The repository is owned by an individual user rather than an organization, so the single-maintainer and concentrated-commit concerns are not offset by visible organizational backing.
The package is young at 218 days and has seven releases, but all seven occurred in the last 12 months and the latest release is recent. The clustered release timing is less informative than a longer maintenance history.
All recent commits came from one contributor, leaving maintenance highly concentrated and increasing abandonment or handoff risk.
There was one commit from one active maintainer in the last three months, showing recent activity but only a very light maintenance cadence.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.