The package includes a README, tests, and a stable MIT declaration, with no install-time scripts or registry deprecation. Its lone maintainer and minimal adoption leave little visible support if issues emerge.
43%
Total Score
25
100
79
83
This is the package's only release, published in December 2019, with no releases in the past 12 months. That indicates substantial abandonment risk for a library dependency.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the package having received no updates since 2019.
One registry maintainer is consistent with a small user-owned project, but it also indicates a thin support base when combined with the lack of recent activity.
The repository has 4 stars and no forks, providing little evidence of broad community adoption or backup support. Popularity is supporting evidence, but this reinforces the maintenance concern.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is secondary to the much older maintenance record.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tightenco/collect Version 5.5.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.