The six-file tree has no tests or README, and no license is supplied. Its stable version and non-archived repository help, but do not offset nearly eight years without a release.
38%
Total Score
0
100
69
75
The package has had only three releases, with none in nearly eight years since October 2018. This is strong evidence of abandonment risk for a dependency.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and limited ongoing maintenance.
Neither the registry metadata nor the package or repository contains a license. That creates a material legal and adoption concern.
The artifact has no README or tests, and the repository has no tests or changelog. The GitHub release exists, but its notes are empty, leaving consumers with little documentation or verification evidence.
The repository has zero stars and forks and only one watcher. Popularity is not decisive, but this provides no supporting evidence of an active user or contributor community.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
infrajs/catalog Version ~1 | — | — |
google/apiclient Version ~2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.