The MIT license, substantial README, tests, changelog, and automated security tooling make the project easier to evaluate and maintain. Its very recent history, absent measured commits, single publisher, and unpinned workflow actions warrant monitoring before relying on it broadly.
68%
Total Score
63
100
86
67
One registry publisher is a thin publishing base, though the linked repository and recent project activity provide some compensating evidence.
The package and repository share the voku namespace and are owned by the same individual, providing consistent ownership context but not organizational redundancy.
Five releases appeared within one day, showing active initial delivery but offering almost no long-term maintenance history.
No commits and no active maintainers were measured over the last three months, which is concerning, although the repository is less than one day old and has recent releases.
The repository has no SECURITY.md policy, leaving vulnerability-reporting expectations undocumented for consumers and contributors.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
voku/agent-map Version ^0.18.3 | — | — |
helgesverre/toon Version ^3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.