The organization-owned repository matches the package and includes tests, while releases remain regular and the package is clearly licensed. A missing security policy leaves less transparency for long-term adoption.
68%
Total Score
75
100
93
75
The repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed recently, the measured development activity is thin and raises maintenance risk.
The repository has no security policy, leaving reporting and response expectations undocumented for a package intended to handle server-side application events.
Version 1.0.1 is a stable major release and not a prerelease, but 90% of recent releases being prereleases adds some release-process uncertainty.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.