The package is compact, documented, and backed by an organization, with no install-time scripts. License metadata is inconsistent, while the repository shows limited current activity.
58%
Total Score
75
100
83
75
The manifest declares MIT while the repository license file is recognized as Apache-2.0, creating a material licensing ambiguity for consumers.
This is the package's only release, published about 7 years ago, with no releases in the past 12 months. The repository was updated later, but that has not translated into a new registry release.
The repository had no commits and no active maintainers in the past 3 months, indicating limited recent development capacity.
No security policy is present in the repository. This is a minor transparency gap for a small definitions-only package, but it leaves no documented security reporting path.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.