The package includes a clear README, a substantial implementation, and no install-time scripts. Its single-release history and unavailable repository reduce confidence, while the proprietary manifest conflicts with the README's MIT claim; clarify licensing before adoption.
55%
Total Score
50
100
80
100
The manifest declares a proprietary license, while the included README says MIT; this unresolved conflict creates a real adoption and redistribution concern.
One registry account has publish access. This does not prove weak maintenance capacity, but it indicates a limited visible publisher base and modestly increases continuity risk for a young package.
This is a young package, 240 days old, with only one release and no demonstrated release cadence, so maintenance maturity is not established.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^4.0||^5.0 | — | — |
andreiio/blade-iconoir Version ^4.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.