The package includes tests, a readable guide, and release notes for this version. It has no declared or detected license, no security policy, and very little visible community activity, so long-term adoption carries maintenance and legal uncertainty.
58%
Total Score
50
75
75
Neither the package nor the linked repository provides a declared license or license file. This creates a genuine legal and transparency gap for dependency adoption.
The package has had 3 releases since September 2024, but none in roughly the last 18 months. That gap is meaningful for maintenance confidence, even though the historical release interval was about 3 months.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and providing no evidence of current maintenance capacity.
The repository has 0 stars and 0 forks, with 1 watcher. This is weak supporting evidence for maturity, although low popularity alone is not decisive for a small package.
The linked repository has no security policy. That modestly reduces transparency about vulnerability reporting and response expectations.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.