Usable with caveats: the release is actively maintained, clearly documented, licensed, and backed by a matching repository. It is only 48 days old, all recent commits come from one contributor, and the repository has no tests or automated security scanning.
68%
Total Score
50
79
100
The artifact includes a substantial 9,868-character README, while missing tests and a changelog is normal for a published artifact. The source repository also lacks tests and a changelog, limiting verification and release transparency.
The registry namespace and repository owner match, but the owner is an individual account rather than an organization, so there is no visible organizational backup for the single maintainer.
The package is young at 48 days with three releases and a median interval of about 24 days, showing ongoing publication but limited maturity history.
All 10 recent commits came from one contributor, so the project has a significant single-maintainer continuity risk and no demonstrated handoff capacity.
There were 10 commits in the last three months with one active maintainer, demonstrating recent work but not a broad maintenance base.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.