This is a clearly identified, MIT-licensed early-stage package with a matching organization-owned repository, a focused file tree, repository tests, and no install-time scripts or registry deprecation. However, it has only two releases published within the same day, is still at version 0.1.1, has no observed commit or issue activity over the last three months, and relies on the author's explicitly unstable dev-main dependency, so maintenance maturity and reproducibility remain meaningful concerns. The repository is not archived and its organization backing is reassuring, but the package should be adopted cautiously with a locked dependency version and an expectation that the API may change.
68%
Total Score
63
50
78
80
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
storyfeed/storyfeed Version ^0.10.0 || dev-main | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.