The package has a clear MIT license, a substantial repository test suite, and organization backing. Its young project history and absent security policy leave less evidence for long-term maintenance and security processes.
67%
Total Score
83
100
86
75
The package is only 66 days old with four releases, and its median release interval is about 12 hours. This shows active initial publishing but provides little evidence of established maintenance.
Only one commit was recorded in the last three months, with one active maintainer. That is limited ongoing activity for a package whose release history is still very young.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. No other provided signal shows a compensating security process.
Version 0.4.0 is not a stable major release, so the API and behavior may still change even though it is not marked prerelease.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.