The package includes clear installation guidance and release notes, with a small dependency surface and no install-time scripts. Its repository lacks security scanning and a security policy, so ongoing assurance is limited.
68%
Total Score
50
100
88
83
One registry maintainer account is consistent with a small owner-led project, but it provides little publishing redundancy.
The repository is owned by a user account rather than an organization, so the concentrated maintainer and contributor activity is not offset by visible organizational backing.
The package has existed since 2021 and published one release in the last 12 months, but six releases across roughly five years indicate a modest maintenance cadence.
All recent commits came from one contributor, leaving maintenance highly concentrated and increasing continuity risk.
Only one commit from one active maintainer was recorded in the last three months, indicating limited recent maintenance capacity despite the recent release.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.