This release is usable but carries meaningful maintenance and transparency concerns. It has a valid license file, stable non-prerelease versioning, no registry deprecation, a matching repository, no install-time lifecycle scripts, and a substantial release history with 49 releases over 820 days. However, the linked repository shows no commits or active maintainers in the last 3 months, the project has no tests or changelog, no security policy or scanning tooling, and negligible community activity. These gaps make the package a reasonable dependency for lower-risk use with monitoring, but not a strongly mature or well-supported choice.
62%
Total Score
50
78
90
The package includes a README and the repository uses GitHub Releases, but it has no tests and no changelog. For an application add-on, the missing tests and changelog reduce transparency and maintenance confidence because no provided signal compensates for those gaps.
The repository is owned by a user account rather than an organization, providing limited visible organizational backing. This is a modest resilience concern, especially alongside zero recent commit activity and negligible repository engagement.
The package has 49 releases across 820 days, showing sustained publication history, but only 3 releases in the last 12 months indicates a relatively slow recent cadence. The history supports continuity while leaving some concern about current maintenance pace.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Despite the recent push and release history, this is a material indicator of currently weak or stalled development activity.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This may reflect a small, quiet project, but it provides little evidence of active community support or responsive maintenance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.