The source project includes tests, build tooling, and a clear MIT license. Its release history is sparse and stale, while recent commit activity is absent; the missing security policy and incomplete workflow audit add smaller transparency concerns.
62%
Total Score
50
100
94
67
The registry namespace and repository owner match, and both are tied to the same individual account, supporting ownership continuity but offering limited organizational backing.
Only two releases exist, with the latest in July 2022 and none in the last 12 months; this indicates a long-standing, slow release cadence despite the repository remaining available.
There were no commits and no active maintainers in the three months measured, which weakens evidence of ongoing maintenance even though the repository is not archived.
No repository security policy is present, leaving vulnerability-reporting and response expectations undocumented.
No workflows were analyzed and one file failed during the audit, so automation security cannot be treated as fully verified; no workflow-specific dangerous findings were reported.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.