The README, matching source tree, MIT license, and release notes make the package straightforward to inspect and integrate. Its small dependency footprint and clean install behavior are positives.
61%
Total Score
50
100
93
75
One registry maintainer is a thin publishing base for a user-owned project, increasing continuity risk if that maintainer becomes unavailable. The matching repository and recent release history provide some compensation.
The package has only 4 releases and no releases in roughly 2 years, with the latest on August 26, 2024. This is meaningful evidence of slowing maintenance, despite the stable release line.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap. That lowers confidence in ongoing fixes and support.
The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap, although it is less serious than evidence of abandoned or unsafe workflows.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.