It has a small, coherent tree with tests and a README, but only one registry maintainer and no security policy. The linked repository is not archived and matches the package, yet there is little evidence of ongoing project support.
40%
Total Score
25
58
100
No license is declared, detected, or included in the package or repository. This creates a material adoption and reuse risk.
This package has made only one release, on June 28, 2022, with none in the following four years. That strongly suggests abandonment risk.
The repository had zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance.
Only one registry account has publish access. For a user-owned project this leaves a thin publishing base, though registry access alone does not establish actual maintenance.
The latest version is v0.1 and is not a stable major release, which indicates an immature project. The presence of a GitHub release provides only limited compensation.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.