This is a usable but very young package with a clear GPL license, a matching source repository, stable release labeling, minimal runtime dependencies, and recent repository activity. However, it has only 38 days of release history with two releases, all five recent commits come from one contributor, and neither the artifact nor repository contains tests or a changelog. The repository is not archived or deprecated and has a security policy, which provides meaningful reassurance, but the limited maturity and single-contributor maintenance model warrant caution before adopting it as a long-term dependency.
68%
Total Score
60
100
78
100
Only one registry account, 7x, has publish access. This is a modest operational risk, although repository activity provides evidence that the account is currently active.
The package has a substantial README and the repository uses GitHub Releases, which partly compensates for the absence of a changelog. Tests are absent from both the artifact and repository, leaving a genuine validation gap.
The linked repository is owned by the user account se7enxweb, not an organization, so the single-contributor and single-publisher risks are not visibly backed by a broader project structure.
The package is only 38 days old and has two releases, with a 38-day median interval, so there is limited evidence of long-term maintenance or release discipline.
All 5 commits in the last 3 months came from one contributor, creating a clear bus-factor concern. The repository owner is a user rather than an organization, so there is no provided project-backing evidence to compensate for that concentration.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.