This is a usable but relatively young package with a clear MIT license, a matching repository, stable v1.3.0 releases, recent commit activity, and no deprecation or install-time lifecycle scripts. However, it has only 93 days of release history, one maintainer and one active contributor responsible for all nine recent commits, no tests or changelog, no security policy, and no security-scanning tooling. The package is therefore reasonable to evaluate for adoption, but its limited maturity and concentrated maintenance create meaningful continuity and verification risk.
68%
Total Score
50
100
78
90
Only one registry account has publish access. Since the repository is user-owned rather than organization-owned, this represents a genuine publishing continuity concern.
A substantive README and GitHub Releases provide useful documentation and release evidence, but neither the artifact nor repository contains tests or a changelog, limiting verification and maintenance transparency.
The repository owner is an individual user, not an organization, so there is no organizational backing to compensate for the concentrated maintainer and contributor base.
The package is only 93 days old with three releases and a median interval of about 47 days, so it shows some release activity but has limited evidence of long-term maturity.
One contributor made all nine commits in the last three months, creating a complete bus-factor concentration in a user-owned project with no organizational backing signal.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.