The MIT license, matching repository, and recent repository push provide basic transparency. Its tiny one-person project and minimal documentation leave limited evidence of long-term support.
62%
Total Score
50
83
67
This is the package's only release, published in April 2024, with no releases in the following 12 months; that weakens evidence of ongoing maintenance.
All recent commits came from one contributor, so maintenance depends entirely on a single person and has no demonstrated handoff capacity.
The repository recorded one commit in the last three months from one active maintainer, which is better than complete inactivity but provides only limited maintenance evidence.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for consumers.
The assessed version is v0.0.1 rather than a stable major release, so its API and behavior may still change substantially.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.