lion/helpers v6.1.5 appears suitable to depend on: it has a long release history with 34 releases, seven releases in the last 12 months, a stable non-prerelease version, current repository activity, tests, changelog, licensing, and a small runtime dependency surface. The main concerns are that recent repository work is concentrated in one contributor, the repository has very limited external popularity, no security policy, and its workflow lacks a top-level token-permissions declaration; these are meaningful hygiene and resilience gaps but are partly offset by organization backing, Dependabot, safe workflow findings, and continued releases. Overall, this is a healthy package with moderate bus-factor and repository-security caveats.
82%
Total Score
70
100
94
80
Only one registry account has publish access, which is a modest publishing-resilience concern, though the linked repository is owned by an organization and recent activity demonstrates ongoing maintenance.
All recent commits came from one contributor, creating a concentrated bus factor. Organization ownership provides some capacity for handoff, but no second active contributor is shown.
There was one commit by one active maintainer in the last three months. Recent releases and merged pull requests show activity, but the low commit volume warrants some caution about maintenance depth.
The repository has only 1 star, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these counters provide little external adoption or review signal.
No security policy was found in the repository, leaving vulnerability-reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.