This release is usable but has meaningful maintenance and transparency concerns. It has a stable, non-pre-release version, 52 releases over roughly 2 years and 21 releases in the last 12 months, is not deprecated, is backed by an active non-archived organization repository, and is clearly licensed under MIT. However, repository activity is concentrated in one contributor, recent commit activity is minimal, the repository has no security scanning or security policy, and the package has no tests or changelog. The package appears to be actively published and structurally complete, but adopters should account for the thin observed contributor base and limited verification and security-process evidence.
72%
Total Score
70
100
83
90
Only one registry account has publish access, which is a concentration risk. The organization-backed repository provides some compensation, so this is caution rather than a severe risk.
A substantial README documents installation and usage, but both the artifact and repository lack tests and a changelog. For a UI integration package this is a genuine maintenance and verification gap, though the usage documentation partially compensates.
All recent commits came from one contributor, creating a low observed bus factor. Organization ownership offers some ability to hand off maintenance, but no second active contributor is shown.
Only one commit was recorded in the last three months from one active maintainer. This is weak recent development evidence, although the frequent release history indicates continued publication activity.
The repository has zero stars, four forks, and one watcher. Low popularity is supporting caution about external validation, but popularity alone is not evidence that the package is unsafe to depend on.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tiderjian/think-core Version >=14.0.0 | — | — |
quansitech/antd-admin Version >=1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.