It includes a substantial README, tests, changelog, MIT licensing, and no install-time scripts. The missing security policy and limited community evidence leave less support if maintenance stops.
62%
Total Score
67
100
88
75
The package and repository are owned by the same individual rather than an organization, so there is no organizational handoff capacity to offset the concentrated maintainer base.
The package is only 42 days old with two releases and one release in the last 12 months, so its long-term maintenance record is still unproven.
One contributor made all six commits in the last three months, creating a meaningful continuity risk if that person becomes unavailable.
The repository has one star and no forks or watchers, offering little independent adoption evidence; the package's young age partly explains this limited signal.
The repository has no security policy, leaving no documented channel or process for reporting and handling vulnerabilities.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.