The package includes clear usage documentation, tests, a stable release, and a permissive license. Its small project footprint leaves limited evidence of broader review or a formal security process.
70%
Total Score
50
100
83
88
The repository is owned by an individual user, not an organization, so the single-contributor maintenance pattern is not compensated by visible organizational backing.
The package has existed for over three years with 17 releases, but only one release in the last 12 months; the recent release shows activity, while the slower cadence merits caution.
All recent repository commits came from one contributor. The repository is user-owned rather than organization-owned, so there is no provided backing signal to offset this concentration.
There was one commit in the last three months from one active maintainer, which confirms recent activity but provides only modest evidence of ongoing maintenance capacity.
The repository has zero stars and forks and one watcher. This is supporting evidence of a very small user base, but popularity alone does not establish that the package is unhealthy.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.