The package is clearly documented and licensed, with no install-time scripts or deprecation notice. Its maintenance record is still very thin, with one release, one recent commit, and a single contributor; there is also no security policy.
58%
Total Score
63
83
83
The repository is owned by the same individual namespace as the package, which supports provenance but provides no organization-level maintenance backing.
The package is only 72 days old and has one release, so there is little release history from which to judge long-term maintenance.
All recent commits come from one contributor, so maintenance continuity depends entirely on that person; the repository is user-owned, not organization-backed.
Only one commit from one active maintainer was recorded over the past three months, leaving limited evidence of sustained maintenance.
The repository has zero stars, forks, and watchers. This is weak supporting evidence, but popularity is not decisive for a small package.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.