A tool for rapidly building command line apps
42%
Total Score
50
100
75
75
The package has had no release in nearly 10 years: the latest release was in October 2016, despite 59 releases overall. Its earlier cadence shows past activity but does not offset the prolonged gap.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing that maintenance has effectively stopped.
There were no new or closed issues or pull requests in the last month, while 18 issues and 12 pull requests remain open, suggesting unresolved maintenance backlog.
The repository reports no build tooling and no security scanning. This is a hygiene gap that adds little confidence to an already inactive project.
No security policy is present in the repository, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, though it is less significant than the inactivity evidence.
| Title | Versions | Severity |
|---|---|---|
CVE-2016-1000021 cli is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.1.0 - 0.11.3. | 0.1.0 - 0.11.3 | Low |
CVE-2016-10538 cli is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 1.0.0. | 0.0.0 - 1.0.0 | Low |
| Dependency | Last Release | Score |
|---|---|---|
exit Version 0.1.2 | — | — |
glob Version ^7.1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.