This is a usable, transparently packaged 0.x component with a clear license, a small runtime dependency surface, an unarchived organization-owned repository, matching repository references, and strong release activity: 52 releases over 477 days, including 7 in the last 12 months. The main concern is that the repository shows no commits or active maintainers in the last 3 months despite the recent registry release, which creates uncertainty about the current maintenance workflow. Zero repository popularity, no security scanning, no security policy, and the package's non-stable major version add moderate maturity and transparency concerns, but the repository contains tests even though they are not packaged and there is no deprecation signal.
68%
Total Score
88
100
83
90
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.