The package includes a clear README, broad tests, MIT licensing, and no install-time scripts. Its single-user project has no commits in the last three months and the published release is six years old, leaving future fixes and support uncertain.
58%
Total Score
50
80
75
The latest registry release was published six years ago, with no releases in the last 12 months. This is a substantial maintenance concern despite the package having seven releases overall.
The repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed recently, that does not show ongoing development activity.
The repository has no security policy. This is a transparency and issue-reporting gap, though it is less serious for this small library than evidence of unsafe build behavior would be.
Version 2.1.0-alpha is explicitly a prerelease, so its API and behavior may still change. The package's recent prerelease share is only 28.6%, which provides limited compensation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
alwaysblank/brief Version ^2.0.0-alpha | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.