This release appears suitable to depend on, with strong package and repository hygiene: it is licensed, non-deprecated, actively releasing, has tests, a changelog, security policy, build tooling, and a repository that matches the package. The main concerns are that the project is very young at 20 days, has only four commits in the last three months from one maintainer, and has no recorded repository popularity or issue activity; these limit evidence of long-term maintenance and resilience but do not indicate abandonment. The absence of security-scanning tooling is a modest transparency gap, while the lack of install-time scripts and the small dependency footprint reduce operational risk.
78%
Total Score
50
100
83
100
The source repository is owned by an individual rather than an organization, so the single-maintainer concentration is not compensated by organizational backing.
Six releases in the first 20 days, with a median interval of about 2.7 days, show active early development, but the short history provides limited evidence of long-term stability.
One contributor made all four recent commits, creating a concentrated bus factor and increasing continuity risk for a user-owned project.
Four commits in the last three months show some recent activity, but all activity comes from only one active maintainer, limiting evidence of sustained maintenance capacity.
There are no open issues or pull requests and no recorded issue or pull-request activity in the last month; this offers little evidence of community maintenance, though it does not itself show unresolved problems.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.