The package includes tests, release notes, and a clear BSD-3-Clause license. It has no install-time scripts, but repository security practices are lightly documented.
68%
Total Score
50
100
93
75
The latest registry release was about 20 months ago, and there were no releases in the last 12 months. This raises maintenance and abandonment concerns, despite the package having seven releases overall.
The repository recorded no commits and no active maintainers in the last three months. Its later push history shows the repository is not abandoned outright, but current development activity is still weak.
The linked repository has no security policy. This is a transparency gap for a web server package, although it does not by itself show that the release is unsafe.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.