Clear packaging, licensing, and security documentation reduce adoption friction. The small runtime dependency surface and stable versioning make the maintenance concerns manageable.
68%
Total Score
67
100
94
90
One registry publishing account is listed, which limits visible publishing redundancy, but the repository and package are consistently tied to the same owner.
The package has 18 releases since 2015, but none in the last 12 months; the roughly 18-month gap lowers confidence in ongoing release maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of slowed source maintenance despite the recent push timestamp.
Neither workflow declares top-level token permissions, leaving permissions less explicit than recommended even though no workflow requests top-level write access.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.