It includes tests, a changelog, a substantial README, and repository security scanning. The project is actively being developed, but its very short history and lack of a security policy leave meaningful adoption risk.
67%
Total Score
67
100
81
83
The repository is owned by an individual user rather than an organization, so the concentrated contributor activity is not visibly backed by a broader maintenance team.
The package is less than one day old and has only two releases, so there is not yet enough history to establish dependable maintenance or release practices.
All 139 recent commits came from one contributor, so maintenance depends entirely on a single person and has limited handoff resilience.
The repository has zero stars, forks, and watchers, so it has no demonstrated community adoption; because the project is less than one day old, this is supporting evidence rather than a decisive concern.
No repository security policy was found, leaving reporting and response expectations unclear for a package that acts as a coding agent and can run shell commands.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.