The package is clearly documented, includes a changelog, and has a small dependency surface without install-time scripts. Its maintenance and source transparency are weak, so adopting it carries meaningful abandonment and verification risk.
44%
Total Score
50
100
70
100
The package has seven releases over about seven years, but none in the last 12 months and the latest release was nearly three years ago. That materially raises abandonment risk.
Only one account has publish access. Registry access does not prove active maintenance, and combined with the stale release history it leaves a thin maintenance base.
Version 0.3.0 is not a stable-major release, although it is not marked as a prerelease; the immature version line adds compatibility uncertainty.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.