This is a newly published 1.0.0 package with strong initial engineering hygiene: it is MIT-licensed, includes a substantial README, source tests, examples, a complete-looking 36-file tree, minimal runtime dependencies, read-only workflow permissions, and organization-owned repository backing. However, it has no release track record beyond this release, no observed commit activity in the last 3 months, no security policy, no security-scanning tooling, and no popularity or long-term maintenance evidence. The repository was updated recently and includes a merged pull request, which is mildly reassuring, but the package should be treated as a promising yet unproven dependency until sustained maintenance is demonstrated.
62%
Total Score
83
100
78
90
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.