This is a recently created, actively maintained pre-1.0 package with 11 releases in 59 days, recent repository activity, a substantial source tree with tests, and no deprecation or archival indicators. The main concerns are the absence of a declared or file-based license, complete concentration of recent commits in one contributor, no security scanning or security policy, and incomplete workflow permission declarations. Organization backing and strong recent delivery activity partially mitigate the maintainer-concentration concern, but the package remains relatively immature and should be adopted only after confirming licensing and accepting the single-maintainer operational risk.
68%
Total Score
88
78
80
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.