This is a young but presently usable package with a stable v1 release, an active and unarchived organization-backed repository, clear licensing, repository tests, changelog, security policy, automated security tooling, and read-only workflow permissions. The main concerns are limited maturity—the project is only 42 days old—and a very thin recent maintenance base: one commit from one contributor in the last 3 months, with that contributor responsible for all recent commits. Zero repository popularity is weak supporting evidence but is not decisive for a new package; review the project again after a longer maintenance history before making it a deeply critical dependency.
72%
Total Score
75
100
89
100
Three releases over 42 days, with a median interval of about 21 days, show active initial iteration but do not yet establish long-term maintenance maturity.
All recent commits come from one contributor, creating a concentrated bus factor. Organization ownership provides some potential handoff capacity, but no second active contributor is evidenced.
Only one commit was recorded in the last 3 months, with one active maintainer; this is a genuine maintenance-capacity concern, though the repository was recently updated and the package is very young.
The repository has zero stars, forks, and watchers. This offers no external adoption evidence, but for a package only 42 days old it is supporting evidence rather than a standalone health failure.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
yorcreative/data-validation Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.