The project is young, with three releases over 233 days, and has no published security policy. A clear README, release notes, and a small dependency surface improve transparency.
72%
Total Score
83
100
92
83
All 10 commits in the last three months came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown, leaving maintenance dependent on one person.
The repository has no published security policy. For a small library this is a transparency gap, although it is less significant than an archived or inactive project.
Version v0.2.1 is not marked as a prerelease, but the 0.x major version indicates the API may still change before a stable 1.0 release.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.