This is a clean, small package with an MIT license, complete README, changelog, tests, a matching ten-file source/artifact tree, limited runtime dependencies, no install-time lifecycle scripts, and no archived or deprecated status. However, v2.0.0 was released only hours ago and is the package's sole release, so there is no meaningful history demonstrating long-term maintenance or version stability; repository activity also shows zero commits and active maintainers during the measured three-month window. The single-user ownership model, absent security policy, and workflow without explicitly declared top-level permissions are additional transparency and governance gaps. It appears reasonable to evaluate for limited use, but production adoption should account for its very limited maturity and maintenance track record.
64%
Total Score
50
100
78
80
One registry maintainer is consistent with a small user-owned project, but it also indicates limited publishing redundancy and a potential single-person continuity risk.
The repository is owned by a user rather than an organization, so there is no organizational backing signal to offset the package's single-maintainer continuity risk.
This is a newly published package with one release and an age of 0 days, so it provides no established release cadence or evidence of sustained maintenance.
The repository records 0 commits and 0 active maintainers in the measured three-month window. Because the package is newly released, this may reflect limited history, but it leaves maintenance continuity unproven.
There are no open issues or pull requests and no activity in the last month. This is not inherently negative for a new small package, but it provides no evidence of an engaged user or contributor community.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.