This is a healthy release to depend on: it is a stable major version from a long-lived package with a recent release, an unarchived repository, recent commit and pull-request activity from two active contributors, documented build and dependency tooling, and no install-time lifecycle scripts. The artifact is licensed and well documented, while repository tests and changelog evidence compensate for tests not being packaged. The main remaining gap is the absence of a repository security policy, and the project appears to rely on a small maintainer base, so dependency monitoring remains appropriate.
86%
Total Score
88
100
100
90
The repository is owned by an individual rather than an organization, so organizational handoff capacity cannot be assumed; however, recent activity shows two active maintainers.
No SECURITY.md or equivalent security policy was found, leaving vulnerability-reporting and response expectations less transparent.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.