The package has a clear README, an MIT declaration, a matching repository, and no install scripts. Its tiny codebase has no tests or security scanning, limiting confidence for a model-changing library.
52%
Total Score
25
69
67
This is the package's only release, published 700 days ago, with no releases in the last 12 months. That is a meaningful maintenance concern for a library handling model changes.
The repository recorded no commits and no active maintainers in the last three months. Combined with the single-release history, this supports a substantial abandonment concern.
The package and repository are owned by the same individual account, which is consistent ownership but provides no organizational backing to offset the thin maintenance evidence.
The repository has zero stars and forks and one watcher. Low popularity is only supporting evidence, but it offers little indication of a broader community to sustain the package.
Composer is used as the build tool, but no security scanning tools were detected. For a small package this is a hygiene gap rather than a standalone reason to reject it.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.