The repository is tiny and has no security policy; its workflow is read-only but uses two unpinned actions. The package is licensed, documented, and not deprecated.
61%
Total Score
50
100
88
75
Only one registry maintainer is listed. That is a thin publishing base, though the matching repository ownership and package mention provide some continuity.
The registry namespace and repository owner match, but the owner is an individual account rather than an organization. This provides ownership consistency without evidence of a broader support structure.
The package has had no releases in the last 12 months, despite five releases since August 2024. This indicates a meaningful maintenance slowdown, though the project is relatively young.
There were no commits and no active maintainers in the preceding three months. Combined with the older last push, this is evidence of paused maintenance.
The repository has zero stars and forks and only one watcher. This is weak supporting evidence rather than a standalone health failure, especially for a small utility package.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.