Clear documentation, tests, licensing, and a small runtime dependency surface make integration straightforward. Maintenance activity has slowed, and the workflows use unpinned actions without a published security policy.
58%
Total Score
50
100
89
83
Only one registry publishing account is listed, which is a thin publishing base; the individual-owned repository provides some context but does not remove the continuity risk.
The repository is owned by an individual rather than an organization, so there is no organizational backing to offset the single-maintainer risk.
The package has 11 releases over about 9 years, but none in the last 12 months and the latest was in April 2023; this indicates meaningful maintenance slowdown.
There were no commits and no active maintainers in the last 3 months, reinforcing the concern raised by the absent recent releases.
There are no open issues and one open pull request, but no issues or pull requests were merged in the last month; this offers little evidence of active maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.