The package is small and cleanly structured, with tests, a license, and no runtime dependencies. Unpinned CI actions, no security policy, and no activity since the initial release leave maintenance and workflow hygiene uncertain.
62%
Total Score
0
100
79
50
There were no commits and no active maintainers in the last 3 months. Combined with the one-release history, this is a meaningful abandonment concern.
This is the only release, published about 14 months ago, with no releases in the last 12 months. That limited history makes ongoing maintenance uncertain for a package still at version 0.1.0.
The repository has zero stars, forks, and watchers. Popularity is not required for a small package, but these counts provide no supporting evidence of community adoption or review.
The repository has no security policy. For a small extension this is a transparency gap, although it does not by itself indicate that the package is unsafe to use.
The release is not marked prerelease, but the 0.1.0 version indicates an early-stage API with limited demonstrated stability. The absence of later releases provides no evidence that this has matured.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.