The project has no tests, security policy, or security scanning, and its repository is exceptionally small. A declared GPL-3 license, matching repository, and no install scripts provide useful transparency.
42%
Total Score
50
67
67
Only two releases appeared in July 2021, with none in the last 12 months; the package has had no demonstrated release maintenance for about five years.
There were no commits and no active maintainers in the last three months, consistent with a project that has been inactive for years and carrying substantial abandonment risk.
Only one registry publishing account is listed, leaving the project dependent on a single publisher; the repository is user-owned rather than organization-backed.
The complete package and repository trees contain only five files, including the implementation and README; this is compact but leaves little visible project structure for testing or maintenance.
The package includes a README that documents installation and usage. Missing tests and a changelog are normal artifact packaging gaps here, but the repository also has no tests or changelog to support maintenance confidence.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.