This release appears usable and reasonably transparent, with an MIT license, substantial generated documentation, tests and changelog coverage, no deprecation, no install-time lifecycle scripts, active recent publishing, and an organization-owned repository that is not archived. However, it is a young pre-1.0 package (87 days old and six releases), repository activity is concentrated entirely in one contributor, the repository has no security scanning or security policy, and it has no observable popularity. The organization backing reduces—but does not eliminate—the single-maintainer continuity risk, so this is a viable dependency with meaningful maintenance and maturity caveats rather than a fully established one.
68%
Total Score
75
100
78
90
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.