The package includes tests, a README, and only one runtime dependency. Its small single-maintainer project has limited security and maintenance capacity, making long-term support uncertain.
42%
Total Score
38
100
63
88
The latest release was in September 2016, with no releases in the last 12 months and only two releases overall. This is strong evidence of abandonment risk for a dependency.
There were no commits and no active maintainers in the last three months. Combined with the old latest release, this indicates that maintenance has effectively stopped.
No declared license, license file, or repository license file was found. This creates a material legal and adoption concern because the reuse terms are unclear.
Registry publishing is controlled by one maintainer account, and the project is user-owned rather than organization-backed. This leaves a thin maintenance base and increases continuity risk.
The registry namespace and repository are owned by the same individual account, confirming ownership continuity but providing no organizational backing to compensate for the thin maintainer base.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.