The repository was pushed recently and has tests, security scanning, and tightly pinned workflow actions. No registry release has appeared for 15 months, and the project has no published security policy.
73%
Total Score
75
100
94
75
The latest release was 15 months ago, with no releases in the last 12 months. This suggests slower publishing and leaves the assessed version aging, despite the package having nine releases overall.
The repository shows zero commits and zero active maintainers in the last three months, which is a maintenance warning. The recent push and merged pull requests provide some compensating evidence, but do not establish a steady release cadence.
No repository security policy was found. For a library handling OTP verification and transport responses, this is a transparency gap, though it is not evidence of an unsafe release by itself.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.