This release presents a strong dependency-health profile: it has a substantial release history with 40 releases over 615 days and 19 releases in the last 12 months, is a stable non-prerelease version, is not deprecated, and is backed by an active, non-archived repository. The repository shows 90 commits and 31 merged pull requests in the recent period, includes tests, CI/build tooling, Dependabot, a security policy, and restrictive read-only workflow permissions. The main concern is contributor concentration: two active maintainers are present, but one accounts for approximately 88% of recent commits. Missing tests and a changelog in the package artifact are compensated by repository tests and GitHub Releases, so they do not materially undermine the assessment.
91%
Total Score
75
100
100
100
The repository is owned by a user account rather than an organization, so there is no organization-level maintenance redundancy to offset contributor concentration; however, recent activity remains strong.
Recent work is concentrated: the top contributor made 79 of 90 commits, or about 88%, leaving a genuine continuity concern despite the presence of a second active contributor.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
prinsfrank/glyph-lists Version ^1.0 | — | — |
prinsfrank/markdown-dom Version ^0.2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.