The package is well documented and has repository tests, release notes, organization backing, and security scanning. Its explicit dependencies and lack of install scripts reduce adoption and publishing concerns.
68%
Total Score
75
100
94
75
The artifact declares MIT but its license file is recognized as LGPL-3.0, creating a material licensing ambiguity despite a license file being present in both the package and repository.
The repository recorded no commits and no active maintainers in the past three months, which suggests maintenance may have paused after this release.
The repository has no published security policy, which is a transparency gap for reporting and handling vulnerabilities.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.