Usable with caveats: the repository is actively maintained and includes tests, a security policy, and a clear license. Adoption carries maintenance risk because only one release has appeared in the last five years and all recent commits come from one contributor.
68%
Total Score
70
100
83
90
One registry account publishes the package. That is consistent with the repository being user-owned, but it leaves little publishing redundancy.
The registry and repository are owned by the same individual user rather than an organization. This matches the single-contributor pattern and offers limited institutional maintenance redundancy.
The package has only two releases across about 5 years, with one release in the last 12 months and a median interval of about 5 years. The recent release shows activity, but the long release gap is a real maturity and maintenance concern.
All seven recent commits came from one contributor, so maintenance depends heavily on a single person and has limited continuity if that contributor stops.
The repository has zero stars and forks and one watcher. This provides little evidence of broad community adoption, though popularity is supporting evidence rather than a decisive health measure.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.