The MIT license, tests, and minimal dependency profile are positives. Security tooling and a security policy are absent, while the project shows little community activity. Pin 0.11 if adopting it.
56%
Total Score
25
100
67
83
Only two releases have been published, with no release in roughly three years. That long pause materially raises maintenance and abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the long release gap, this points to weak current maintenance.
The package contains tests, and its source repository also has tests; the missing changelog is normal for a small package, but the artifact has no README for consumers.
There are no open issues or pull requests and no recent issue activity. This is neutral for a small package, but it provides little evidence of an active user or contributor community.
The repository has zero stars and forks and only one watcher. Popularity is not required for health, but this provides no supporting evidence of broad adoption or community support.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.