The project includes tests, release notes, a clear README, and security scanning. Recent development has paused, while all six workflow actions are unpinned and one workflow could not be audited.
62%
Total Score
50
100
86
67
post-install-cmd and post-update-cmd scripts add installation-time behavior that consumers must trust and maintain, creating a modest transparency and supply-chain hygiene concern.
The package and repository share the koriym namespace, but the repository owner is an individual account rather than an organization, so there is limited visible organizational backing.
The package has nine releases over 614 days, but only one release in the last 12 months, indicating a substantially slower recent cadence despite its earlier release history.
The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance may have paused.
There are no open issues and one open pull request, but no issues or pull requests were merged in the last month; this provides little evidence of active project handling.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.