It has a clear MIT license, a focused runtime dependency, and documented tests. The small release history and single-contributor activity warrant caution for long-lived projects.
67%
Total Score
67
100
93
50
Only two releases have been published over about 21 months, with one release in the last 12 months and an interval of about 19 months, indicating a thin release track.
All two recent commits came from one contributor, leaving maintenance highly concentrated and creating a meaningful continuity risk for a small project.
The repository recorded two commits in the last three months, so there is recent activity, but the volume is modest for a maintained library.
The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.
The only workflow was fully analyzed with no detected dangerous sinks or audit findings, but all three referenced actions are unpinned, weakening build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.