The package includes thorough tests, release notes for this version, a clear MIT license, and a matching source repository. Maintenance has gone quiet, and every analyzed workflow action is unpinned; the missing security policy adds a smaller transparency concern.
62%
Total Score
67
100
83
75
Although the package has 21 releases over about 17 months, it has had no releases in the last 12 months, which is a meaningful maintenance concern for a young library.
There were no commits and no active maintainers in the last 3 months, indicating that development activity has currently stopped.
There are no open issues or pull requests, but there was also no issue or pull-request activity in the last month; this is consistent with the inactivity concern rather than evidence of active maintenance.
The repository has one star and no forks, offering little adoption evidence, but popularity is supporting evidence and does not outweigh the direct maintenance signals.
The linked repository is not archived, but its last push was about 10 months before collection, so the non-archived status does not offset the broader signs of inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.