The package is licensed, documented, tested, and has no runtime dependencies. Pin version 0.4 and expect limited maintenance between releases.
68%
Total Score
50
100
86
50
The package has only 4 releases since December 2014, with a median interval of about 433 days, although one release arrived in the last 12 months. This indicates sparse maintenance rather than abandonment.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. The release pushed on March 26, 2026 provides some compensating evidence, but ongoing maintenance capacity is still unclear.
The repository has no security policy. This is a transparency gap, though it is partly offset by the clean workflow audit and the package's small scope.
Version 0.4 is not a prerelease, but it remains below a stable major version, so API stability may be less certain for consumers.
The workflow was fully analyzed and uses read-only permissions with no dangerous findings, but both of its action references are unpinned. That leaves avoidable build reproducibility and action-update risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.