The repository has tests, active issue and pull-request handling, and Dependabot scanning. GitHub Actions uses all 7 references unpinned and grants top-level write access in one workflow, so supply-chain hygiene needs attention.
62%
Total Score
67
88
67
The registry namespace and repository owner match, but the owner is an individual account rather than an organization, so there is limited visible institutional backing.
This is the first release, published 0 days ago, so there is no release history yet to demonstrate sustained maintenance.
No commits and no active maintainers were recorded during the last three months. This is a significant maintenance concern despite the recent issue and pull-request activity.
No security policy is present. This is a transparency gap for an extension that executes WebAssembly, though it is not evidence of unsafe behavior by itself.
Version 0.1.0 is not a stable major release, and the package documentation identifies the API as experimental, so compatibility may change substantially.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.