This release appears usable and actively maintained, with a valid MIT license, a substantial README and changelog, a consistent stable version, no registry deprecation, no install-time scripts, and recent repository activity. The main risks are concentrated maintenance in a single contributor, very low repository adoption, no tests, and no security policy or security-scanning tooling; these make the package less resilient and transparent, but do not indicate abandonment because releases and commits remain recent.
72%
Total Score
70
100
83
90
Only one registry account has publish access. This is a resilience concern for a user-owned project, although repository activity shows that the project is still being updated.
A substantial README and changelog are present, and the repository also has a changelog and GitHub Releases. Tests are absent in both the artifact and repository, which is a modest maintenance-quality gap for a library.
The repository is owned by an individual user rather than an organization, so the single-maintainer and single-contributor concentration is not compensated by visible organizational backing.
One contributor made all 5 commits in the last 3 months, giving the project a bus factor of one and creating a real continuity risk despite recent activity.
The repository has only 1 star, 0 forks, and 1 watcher. Popularity is supporting rather than decisive evidence, but these values provide little external validation or community resilience.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twbs/bootstrap Version ^4 || ^5 | — | — |
components/jquery Version ^3 | — | — |
twbs/bootstrap-icons Version ^1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.