Detect and extract the static part of a glob string
58%
Total Score
50
100
78
75
The repository is owned by an individual rather than an organization, so continuity depends on a single maintainer. This is consistent with the one registry maintainer and contributes to bus-factor risk.
The package has only two releases and none in the last 12 months; its latest release was in February 2019, indicating long-term maintenance inactivity. Its small, focused scope partly reduces the concern, but the age still raises abandonment risk.
There were zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and indicating current maintenance inactivity.
There are no open issues and five open pull requests, but none were created or merged in the last month. The dormant pull-request queue suggests limited project responsiveness.
The repository has 10 stars and 2 forks, indicating a small user and contributor footprint. Low popularity is only supporting evidence, but it reinforces the limited maintenance-capacity concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.