This release has solid basic hygiene: it is MIT-licensed, includes a README, changelog, tests, a complete small file tree, minimal runtime dependencies, no install-time scripts, and a non-archived linked repository with a safe analyzed workflow. However, it is extremely new, with only two releases on the same day and no recorded commits or active maintainers in the preceding three months, so long-term maintenance and maturity are not yet demonstrated. The repository has low popularity, lacks a security policy, and its workflow does not declare top-level token permissions. Overall, it appears usable but should be adopted with some caution until a longer maintenance history is established.
68%
Total Score
63
100
83
80
There is one registry publishing maintainer. Because the repository is user-owned rather than organization-owned, this is a somewhat thin operational base, though registry access alone does not establish actual maintenance activity.
The repository is owned by an individual user rather than an organization, so there is no demonstrated organizational backing to compensate for the single-maintainer structure.
The package is only 0 days old and has two releases within roughly 5 hours, so it has not yet demonstrated sustained maintenance or release stability.
The repository records 0 commits and 0 active maintainers in the last 3 months. Given the package age of 0 days, this is not proof of abandonment, but it leaves sustained maintenance unestablished.
The repository has only 1 star, 0 forks, and 1 watcher; this provides little external validation, though low popularity alone is not a decisive health problem for a new small package.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.