This release appears healthy and reasonable to depend on: it has been maintained since 2021, received 8 releases in the last 12 months with a median interval of about 48 days, is not deprecated or archived, and has active repository commits from three contributors. The package is licensed, dependency-light, tested, clearly documented, and backed by an organization; the repository also matches the package and mentions it in its README. The main reservations are the lack of a security policy and security-scanning tooling, plus a pull_request_target workflow with top-level write permissions, which increase repository and release-process risk even though they do not indicate that the package itself is malicious.
84%
Total Score
90
100
88
70
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.