Clear documentation, tests, licensing, and security scanning support adoption. The single-release history and unpinned workflow actions leave maintenance and build reproducibility less reassuring.
68%
Total Score
50
100
94
67
The repository is owned by an individual rather than an organization, so the concentrated contributor activity is not offset by visible organizational backing.
This is the sole release, published 311 days ago, so there is limited evidence of release maturity or sustained registry maintenance.
All two recent commits came from one contributor, leaving maintenance highly concentrated and creating a meaningful continuity risk.
Two commits in the last three months show some recent maintenance, but the activity is limited and comes from only one active maintainer.
No repository security policy was found, which weakens vulnerability-reporting transparency for a package intended to handle sensitive text.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.