The source project is active, documented, and backed by an organization. Its missing security policy and limited recent contributor diversity warrant pinning this exact release.
70%
Total Score
63
94
50
The package has 26 releases over roughly five years, but none in the last 12 months. That slows confidence in ongoing registry maintenance, although recent repository activity provides some compensation.
All 9 recent commits came from one contributor, creating concentration risk. Organization ownership provides some handoff capacity but does not remove the observed lack of contributor diversity.
The repository had 9 commits in the last three months, showing current activity, but all were produced by one active maintainer.
The repository received 10 pull requests in the last month, despite no merges and no closed issues. This shows ongoing attention but also limited demonstrated throughput.
No repository security policy was found, leaving vulnerability-reporting expectations less explicit than ideal for a widely used project.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.