This release appears usable and actively developed: it has 36 releases over 229 days, 34 releases in the last 12 months, a stable non-prerelease version, no registry deprecation, a substantial README, packaged tests, a focused dependency profile, and no install-time lifecycle scripts. However, the package does not declare a source repository, leaving maintenance activity, provenance, issue handling, and contributor depth unverifiable; the single registry maintainer and absent changelog add moderate transparency and continuity concerns. Overall, it is a reasonable dependency with caution warranted because important repository-level evidence is unavailable.
72%
Total Score
50
100
100
100
Only one account has registry publish access. This does not establish actual maintenance activity, but it does indicate limited administrative redundancy and a potentially thin release bus factor.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.