This release is generally usable and has strong transparency fundamentals: it is licensed under BSD-2-Clause, includes substantial documentation and a changelog, has a matching repository with source tests, uses minimal runtime dependencies, is not deprecated or archived, and has no dangerous workflow patterns. However, the project has only five releases over roughly 2 years and one release in the last 12 months, while recorded commit activity is zero over the last 3 months with no active maintainers; the repository also lacks a security policy and its workflow declares no top-level token permissions. These are meaningful maintenance and security-hygiene concerns, though the recent release and organization-backed repository provide some compensating evidence.
72%
Total Score
67
100
83
80
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.