The package includes a substantial artifact, a README, tests, and no install-time scripts. The license mismatch, repository/package mismatch, and lack of recent activity leave important maintenance and reuse concerns unresolved.
42%
Total Score
0
60
100
The package has had no releases in the last 12 months, with its latest release about 2 years ago; four total releases provide only limited evidence of sustained maintenance.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, reinforcing the release-history evidence of stalled maintenance.
An MIT license is declared, but the artifact's LICENSE.TXT was detected as EPL-1.0. Although a license file exists, this mismatch creates a material reuse and provenance concern.
The linked repository name does not match the package name and its README does not mention the package, so the repository may not clearly belong to this release.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.