The four-file package is easy to inspect, and its README explains installation and basic use. It has no license, while the source project shows little activity or security process.
43%
Total Score
0
100
71
83
Only two releases were published, both on the same day, with no release in nearly three years. That leaves the package with a strong abandonment concern despite its small scope.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and weakening maintenance confidence.
No registry license declaration or license file was detected in the package or repository. This creates a real adoption and redistribution concern.
The repository has no security policy. For a small utility this is a hygiene gap rather than a severe standalone risk, but it reduces transparency if issues arise.
The release is not a prerelease, but it remains on the 0.x major line, so compatibility expectations are less established than for a stable-major package.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.