Usable with caveats: the package is licensed, tested, not deprecated, and backed by an active organization-owned repository. However, it has had no registry release in nearly two years and no repository commits in the last three months, so maintenance should be verified before adoption.
62%
Total Score
75
100
72
100
The artifact lacks a README, which weakens consumer guidance, but the repository contains tests and a changelog, providing useful project documentation and maintenance evidence.
The latest release was published in December 2024, with no releases in the last 12 months. This is a meaningful sign of slowing maintenance for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with no registry releases in the last year, this raises maintenance and abandonment concerns.
There are no open issues and two open pull requests, but none were merged or otherwise active in the last month, offering limited evidence of current responsiveness.
The repository name does not exactly match the package name, and no README package mention was collected. This leaves some uncertainty that the linked repository is the intended source, despite the organization backing.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.