Lock on asynchronous code
62%
Total Score
38
100
83
90
50
The repository had zero commits and zero active maintainers in the last 3 months, directly indicating that active maintenance has stalled.
No build attestation or trusted-publisher provenance is present, leaving publication origin less transparent; this is a modest concern rather than a health verdict by itself.
Only one account has registry publish access. This is a thin publishing base and adds continuity risk when combined with the lack of recent activity.
The repository is owned by an individual rather than an organization, which provides less visible institutional continuity for a package with one registry maintainer.
The package has 36 releases over roughly 11 years, but none in the last 2 years 9 months; this indicates maintenance has slowed substantially.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.