The package has clear usage documentation, a license, and a matching source repository with release automation. Recent repository activity is absent, and all workflow actions are unpinned; publishing also uses a long-lived token rather than trusted publishing.
61%
Total Score
50
94
83
Two registry maintainer entries represent the same named individual. This is consistent with a personal project but leaves a relatively narrow publishing base.
The registry namespace and repository are owned by the same individual, which supports consistent ownership but does not provide organizational backing.
The package has 74 releases, but no releases in the last 12 months; this indicates that maintenance and updates may have stopped despite its established history.
There were zero commits and zero active maintainers in the last three months, a material sign of stalled maintenance for a package whose latest registry release is also more than a year old.
The repository still receives pull requests, including nine opened in the last month, but none were merged and no issues were closed during that period, indicating limited response activity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.