The project is only 2 days old and nearly all recent commits come from one contributor. Documentation, tests, release notes, and active repository work provide useful support, but the license mismatch and workflow configuration merit attention.
68%
Total Score
83
81
67
The artifact contains license files and the repository is licensed, but detected MIT and BSD-3-Clause text is broader than the manifest's MIT declaration, creating an avoidable licensing clarification point.
The package is only 2 days old with four releases, so its maintenance record and adoption maturity are not yet established; the rapid release activity is encouraging but cannot compensate fully.
One contributor made 66 of 67 recent commits, leaving maintenance highly concentrated; the second contributor provides only limited backup.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
Version v0.14.3 is pre-1.0, which signals a greater likelihood of breaking changes than a stable-major release; it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.