The package is small, documented, and easy to install, with no install-time scripts. Maintenance is the main concern: no commits in over three years, two open pull requests, and only one star leave little evidence of ongoing support. No security policy and unpinned workflow actions add modest risk.
55%
Total Score
33
100
83
67
There were zero commits and zero active maintainers in the last three months, consistent with the latest release being over three years old and weakening confidence in future fixes.
One registry maintainer is consistent with the repository being owned by an individual, but it leaves limited visible publishing redundancy if that person becomes unavailable.
The latest release was over three years ago, with no releases in the last 12 months; this is meaningful evidence of slowing maintenance for a dependency that may need compatibility fixes.
There are two open pull requests but no new or merged pull requests in the last month, suggesting unresolved maintenance work rather than active collaboration.
The repository has one star and two forks, offering little supporting evidence of broad community review or backup maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.