This is a very new, pre-1.0 package with three releases published within roughly one hour and no observed commit or maintainer activity over the preceding three months, so its maintenance maturity and long-term stability are not yet established. The package is nevertheless transparent and reasonably structured: it has an extensive README, a small runtime dependency footprint, explicit MIT/Apache-2.0 licensing, no install-time scripts, repository tests that are not included in the artifact, and no dangerous workflow configuration. The linked repository is not archived and its README explicitly references the package, reducing concern that it is an unrelated repository. Suitable for cautious evaluation, but adoption should account for its extremely limited history and absent security policy.
62%
Total Score
50
100
75
90
The repository owner is an individual user rather than an organization. This does not imply poor health, but it means there is no observed organizational backing to compensate for the very thin project history.
The package is only 0 days old with three releases and a median interval of about 56 minutes. Rapid initial releases provide some activity evidence, but there is not yet enough history to establish sustained maintenance.
No commits and no active maintainers were observed during the last three months. Because the repository and package are extremely new, this may largely reflect limited observation time, but it still leaves sustained maintenance unproven.
There are no open issues or pull requests and no recent issue or pull-request activity. Given the package's age, this is inconclusive, but it provides no additional evidence of an established maintenance community.
The repository has zero stars, forks, and watchers. For a package published only hours ago, this is expected and weak evidence rather than a standalone abandonment verdict.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.