Tests, a readme, and release notes provide basic consumer documentation. However, the project has not released or committed anything since February 2017, and the package has no license or clear repository package reference.
31%
Total Score
38
61
83
This is the package's only release, published over 9 years ago, with no releases in the last 12 months; that strongly indicates abandonment risk.
There were zero commits and zero active maintainers in the last 3 months, confirming that maintenance has stopped rather than merely slowed.
No registry license declaration or license file was detected in either the package or repository, leaving the terms for using this dependency unclear.
One registry maintainer is consistent with a small user-owned project, but it provides limited maintenance capacity when combined with the long period of inactivity.
The repository is owned by an individual account rather than an organization, so the single-maintainer structure is not compensated by visible organizational backing.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.