The repository is current, tested, and clearly matches the package. A single maintainer, no security policy, and no repository security scanning leave limited assurance as the project matures.
68%
Total Score
50
100
83
83
One registry maintainer is listed. That is a thin publishing base, although the repository and package ownership are aligned with the same individual.
The registry namespace and repository owner are the same individual account, showing consistent ownership rather than an unexplained publishing arrangement. Individual ownership still provides less organizational redundancy than a backed project.
The package is only 101 days old and has had two releases, with a median interval of about 102 days. That is limited evidence of long-term maintenance, though the latest release was published recently.
There were no new issues or pull requests in the last month and no merged pull requests. Given the package is only 101 days old, this is limited evidence rather than proof of abandonment.
The repository reports zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any audience provides little external maturity signal.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.