The repository is small but clearly structured, tested, licensed, and backed by an organization. Its stable version and non-archived source help, though the project has seen no release in over six years and no commits in over five years.
58%
Total Score
75
100
75
75
The latest release was over six years ago, with no releases in the last 12 months. This is a substantial maintenance concern for a dependency, although the package has a seven-release history.
The artifact includes a license file and the repository also has one, so licensing is transparent. However, the manifest declares MIT while the detected file is BSD-3-Clause, creating a material mismatch to verify.
There were no commits and no active maintainers in the last three months, consistent with a project whose development has largely stopped.
The repository has no security policy, leaving vulnerability reporting and handling procedures undocumented. This is a secondary transparency gap rather than evidence of an unsafe release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
arc/base Version ~3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.