The package has a clear README, tests, and a license, with no install-time scripts. Its small dependency footprint helps, but there is no security policy.
64%
Total Score
75
100
83
75
The package is brand new, with all five releases published within the same day and no established release history yet. This limits evidence of long-term maintenance.
One contributor made all 34 commits in the last three months, leaving no demonstrated contributor redundancy. For a user-owned project, this creates a meaningful maintenance continuity risk.
The repository has no security policy, so users lack documented guidance for reporting vulnerabilities or understanding the project's security response process.
Version 0.5.0 is not a stable major release, although it is not marked as a prerelease. The version suggests an early-stage project rather than a mature compatibility commitment.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.