Documentation is clear, licensing is explicit, and installation has no lifecycle scripts. Its young release history and single-person maintenance make long-term support uncertain; pin this release only if a prerelease is acceptable.
58%
Total Score
50
100
75
75
The package includes a substantial README and release notes for this exact version, which compensates for the absence of packaged tests and a changelog; the repository also reports no tests.
The package is less than a day old with only three releases, so there is not enough history to establish dependable maintenance or release practices.
One contributor made all three recent commits, leaving maintenance dependent on a single person without demonstrated backup capacity.
Three commits were made in the last three months, showing recent activity, but that activity is too limited to demonstrate a mature maintenance pattern.
The repository has no published security policy, which is a transparency gap for a validation library, though the package's very recent and small project history limits how strongly this weighs.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
zoujingli/type-runtime Version ~1.0.0@dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.