The project has recent commits, a current release, tests in its repository, and an active organizational owner. Maintenance is concentrated in one contributor, while the license metadata differs from the detected license and all workflow actions are unpinned.
68%
Total Score
75
100
81
83
The package declares GPL-2.0-or-later, while the artifact license files were detected as GPL-3.0; the repository also has a license file, so this is a metadata consistency concern rather than an unlicensed release.
The package has 16 releases over about 3 years and a latest release in August 2026, but only one release occurred in the last 12 months, indicating a slower recent cadence.
All 11 commits in the last 3 months came from one contributor, creating a meaningful continuity risk; organizational ownership provides some capacity to hand off maintenance.
The repository has 28 open issues and 10 open pull requests, with no issues or pull requests closed or merged in the last month; this suggests unresolved maintenance backlog.
The release is not a prerelease, although the package remains below version 1.0, so its public API may still evolve.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.