This is a coherent, organization-backed package with a matching repository, a stable non-prerelease version, clear documentation, tests, a complete-looking source tree, no deprecation, no install-time scripts, and recent release and pull-request activity. However, it is extremely new—only three releases within the first day—and the repository reports no commits or active maintainers in the last three months, so long-term maintenance is not yet demonstrated. The absence of a security policy, security-scanning tooling, and explicit workflow token permissions also leaves avoidable transparency and CI-hardening gaps. It appears reasonable to evaluate for adoption, but dependency owners should monitor maintenance and security practices closely.
68%
Total Score
83
100
83
80
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.