The repository was updated after the sole 2023 release, but the package remains extremely small and has no license or security policy. Its README provides basic installation guidance, while the absence of tests is normal for the published artifact.
58%
Total Score
67
78
75
No registry license declaration, license file, or repository license file was detected, leaving the terms for using and redistributing this dependency unclear.
The artifact and repository each contain only four files, including a service provider and README; this is a very small implementation with limited visible project structure.
The source repository is user-owned rather than organization-backed, so the single registry maintainer does not benefit from organizational backing; the project remains small and lightly evidenced.
This is the package's only release, published about 3 years and 8 months ago, with no releases in the last 12 months; the linked repository was updated later, which partly offsets but does not remove release-staleness concerns.
There are no open issues and one open pull request, but no issues or pull requests were merged in the last month; this gives little evidence of an active maintenance process.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.