The package has tests, a readable README, release notes for this version, and no runtime dependencies. Its small community, single registry maintainer, absent security policy, and nearly two years without new releases or commits increase maintenance risk.
58%
Total Score
50
100
75
75
One person has registry publishing access. This is not inherently a problem for a small user-owned package, but it leaves little visible publishing redundancy alongside the lack of recent activity.
The package and repository are owned by the same individual account. That is consistent ownership, but it provides less organizational backing than an established team or organization.
The package has made seven releases since March 2022, but none in the nearly two years before the September 2026 assessment; this indicates substantially slowed maintenance.
The repository had zero commits and zero active maintainers in the preceding three months, providing no evidence of ongoing maintenance.
The repository has three stars, no forks, and one watcher. This is limited adoption evidence, but popularity is supporting information and does not outweigh the direct maintenance signals.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.