This is a usable and reasonably transparent package: it has an MIT license, a clear source repository matching the package, a substantial source and test tree, stable non-prerelease versioning, minimal runtime dependencies, and no deprecation or install-time lifecycle scripts. The main concerns are limited maturity and maintenance capacity: the package is about 353 days old with only 3 releases, just 2 commits in the last 3 months, and all recent activity comes from one contributor; the repository also has no security policy or security-scanning tooling. These issues warrant caution for long-lived or security-sensitive dependencies, but the recent repository push, tests, and coherent package structure keep it above the unhealthy range.
72%
Total Score
50
100
83
90
Only one registry account has publish access. This is a modest publishing continuity risk, though it is partly supported by the matching source repository and recent activity from the same project identity.
The repository is owned by the user account osynapsy rather than an organization, so there is no organizational maintenance backing to offset the small maintainer base.
The package has existed for 353 days but has only 3 releases, with a median interval of about 177 days; this indicates limited release history and maturity, although all 3 releases occurred within the last 12 months.
All 2 recent commits came from one contributor, giving the project a concentrated maintenance base and increasing continuity risk for a user-owned repository.
Only 2 commits were recorded in the last 3 months, showing limited maintenance activity, although the repository was recently pushed and is not archived.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.