Usable with caveats: the package is clearly licensed, documented, linked to a matching repository, and has recent maintenance. It is still a very new one-release project with all recent commits from one contributor, so long-term continuity is not yet established.
72%
Total Score
63
100
83
100
The repository is owned by the same individual namespace as the package, so the source relationship is direct, but it does not provide organization-level handoff capacity.
This is a young package, released 48 days ago with only one release, so there is little history available to demonstrate sustained maintenance.
All 4 recent commits came from a single contributor, leaving maintenance dependent on one person and increasing continuity risk.
The repository received 4 commits in the last 3 months from one active maintainer, showing recent work but limited evidence of sustained maintenance capacity.
The repository has only 1 star and no forks or watchers; this is weak supporting evidence, but popularity alone does not determine the health of a small specialized package.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.