Lantern 1.2.4 appears suitable to depend on: it is a stable, non-deprecated package with a four-year history, five releases in the last 12 months, a matching and organization-owned repository, recent repository activity, a complete MIT licensing trail, and a lightweight dependency profile. The main reservations are that only one contributor made the single commit in the last three months, the repository has no security scanning or security policy, and installation uses a post-autoload-dump lifecycle script. The missing artifact changelog and packaged tests are substantially mitigated by repository tests and GitHub Releases, while the low popularity is only supporting evidence rather than a decisive concern.
78%
Total Score
80
100
89
80
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.