The repository has had no commits or releases in roughly two years, and all eight workflow actions are unpinned. Licensing, documentation, matching source ownership, and repository tests provide useful transparency, but there is no security policy.
58%
Total Score
33
100
78
75
There were zero commits and zero active maintainers in the last three months, consistent with the roughly two-year release gap. This is a significant maintenance concern.
The registry namespace and repository are owned by the same individual, so the package has identifiable ownership, but no organization backing is shown to compensate for the thin maintenance base.
The package has five releases since August 2021, but none in the last 12 months and the latest release was about two years ago. This indicates materially reduced maintenance activity.
There are no open issues or pull requests and no recent issue or pull-request activity. This is neutral for a quiet small project, but it offers little evidence of active maintenance.
The repository has zero stars and forks and one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide little external validation.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
alex-kalanis/kw_paths Version >=4.0 <5 | — | — |
alex-kalanis/kw_routed_paths Version >=3.0 <4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.