The module has a clear MIT license, a focused README, and no install-time scripts. Its tiny repository and absent security policy provide little additional assurance.
40%
Total Score
75
83
75
The package has had only two releases, with the latest published in May 2017 and none in the last nine years. That long silence is a meaningful abandonment concern, though the package may be intentionally stable.
The repository has recorded no commits and no active maintainers in the last three months, consistent with the absence of releases since 2017. The repository is not archived, which provides only limited compensation.
The repository has 2 stars and 1 fork, offering little evidence of broad community adoption or support. Low popularity is supporting evidence rather than a verdict on its own.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a modest gap for a small configuration module, not a standalone reason to reject it.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.