Usable with caveats: it is a very new package with nine rapid releases, but there is little evidence yet of sustained maintenance. The repository has no tests, changelog, security scanning, or security policy, so adoption should be limited until the project demonstrates longer-term activity.
62%
Total Score
50
100
78
90
A substantive README documents requirements and installation, but neither the package nor repository includes tests or a changelog. For a small theme this is a meaningful transparency and maintenance gap.
The registry namespace and repository owner match, and both are a user account. This establishes ownership consistency but offers limited organizational backing.
The package is only 1 day old, despite having nine releases in that period. This shows active initial publishing but provides no evidence of sustained maintenance yet.
The repository records zero commits and zero active maintainers in the last 3 months. This is concerning for maintenance capacity, although the package's very recent release history limits how strongly it can be interpreted.
There are no reported new issues or pull requests in the last month and no merged pull requests. Given the repository's 1-day package history, this is insufficient evidence of maintenance rather than proof of abandonment.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
moonshine/moonshine Version ^4.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.