This is a mature, stable, non-deprecated package with a long release history, a matching and documented source repository, repository tests, minimal dependencies, and no install-time lifecycle scripts or dangerous workflows. The main concerns are that the repository shows no commits or active maintainers in the last 3 months, the project has a single registry maintainer, there is no security policy or security-scanning tooling, and repository popularity is very low; however, the release published on 2026-09-06 and the repository was pushed on the same date, which provides some evidence of ongoing maintenance. It appears usable to depend on, but adoption should account for its limited maintainer and community depth.
72%
Total Score
50
100
89
90
Only one registry account, Tomoya Koyanagi, has publish access. This creates some operational concentration risk, although the linked repository and recent release activity provide partial compensating evidence.
The repository is owned by a personal user account rather than an organization. This is consistent with the single-maintainer profile and leaves less visible organizational continuity.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance concern. The same-day release and repository push partially offset the apparent inactivity but do not establish sustained activity.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is not inherently negative, but it provides no evidence of an active community or maintenance response.
The repository has 0 stars, 0 forks, and 1 watcher. Very low adoption provides little community validation or backup, though popularity alone is supporting evidence rather than a health verdict.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.