The package includes tests, a clear license, and no install-time scripts. Its only release is about 17 months old, repository commits have stopped, and every workflow action is unpinned. Pin this exact version only if its current behavior is already sufficient.
47%
Total Score
0
100
67
67
This is the package's only release, published about 17 months ago, with no releases in the last 12 months. That limited history and long inactivity reduce confidence in ongoing maintenance.
There were zero commits and zero active maintainers in the last three months. Combined with the single-release history, this is strong evidence of reduced or absent maintenance capacity.
The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy small package, but these counters provide no supporting evidence of community adoption or oversight.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is less significant than the maintenance concerns.
Version 0.0.1 is not a stable major release, so its API and behavior may still change substantially if development resumes. The absence of later releases provides no evidence of maturation.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.