It has a stable major release, simple dependencies, and no install-time scripts. Security coverage is limited, with no policy or scanning reported.
57%
Total Score
50
100
71
83
The published artifact has no README, tests, or changelog. Tests and changelogs are expected in the source project rather than the artifact, but the missing README reduces guidance for consumers of this library.
The repository is owned by an individual rather than an organization, so the small maintainer footprint offers limited visible continuity if the project is abandoned.
Six releases arrived during the package's first month, but the concentrated cadence does not yet demonstrate sustained maintenance over its roughly 10-month lifetime.
There were no commits and no active maintainers during the last three months, which is a meaningful maintenance concern for a package with a short history.
The repository has zero stars, forks, and watchers. This provides no external maturity evidence, though low popularity alone does not make a small, focused package unsafe to use.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^3.0 || ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.