Usable with caveats: this is a mature, well-documented package with tests, stable releases, no runtime dependencies, and an active repository link. Recent maintenance has slowed to no commits in three months, with only one release in the last year and a single registry maintainer, so review before adopting for critical systems.
68%
Total Score
50
100
95
90
50
The release has no build attestation, trusted publisher identity, or staged-publishing record, leaving publication provenance less transparent.
Only one registry account has publish access. This is not evidence of poor activity by itself, but it leaves a thin publishing and recovery base for an individually owned project.
The repository is owned by an individual user rather than an organization, providing less visible institutional backing for long-term continuity.
The project is mature at about 10.6 years old with 72 releases, but only one release occurred in the last 12 months, indicating a slower release cadence.
There were zero commits and zero active maintainers in the last three months, a concrete sign that maintenance activity has recently stalled despite the repository not being archived.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.