This release appears usable and generally healthy: it has a long history since 2019, 52 releases, seven releases in the last 12 months, a recent stable version, no registry deprecation, an MIT declaration, packaged tests and a changelog, and no install-time lifecycle scripts. The main concern is reduced transparency and limited ability to verify ongoing repository maintenance because no source repository is declared; repository activity, provenance, and contributor signals are therefore unavailable. The package is substantial and has a moderate runtime dependency set, so it is reasonable to consider, but the missing repository backing warrants additional review before making it a critical dependency.
78%
Total Score
100
100
100
All health scores are okay.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sulfur/framework Version ~1.2.0 | — | — |
sulfur/components Version ~1.2.0 | — | — |
pragmarx/google2fa Version ~9.0.0 | — | — |
bacon/bacon-qr-code Version ~3.1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.