Clear documentation, licensing, security policy, pinned workflow actions, and active build tooling support dependable use. The short release history and complete reliance on one contributor leave meaningful continuity risk.
68%
Total Score
67
100
86
100
The package and repository are owned by the same individual account, so the source identity is consistent, but there is no organizational backing shown to offset contributor concentration.
The package is only 45 days old with two releases, so its maintenance record is still too short to establish long-term reliability.
One contributor made all 11 recent commits, leaving maintenance and release continuity dependent on a single person.
Version 0.2.0 is not a stable major release, which indicates an API that may still change materially despite not being marked prerelease.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.