The artifact is small, has a README, declares MIT licensing, and uses no install-time scripts. Its maintenance and provenance are no longer dependable, so adopting this release creates substantial abandonment risk.
8%
Total Score
0
100
42
100
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe warning against taking a new dependency on it.
This package has only one release, published over 7 years ago, with no releases in the last 12 months. The GitHub release notes say only “First Release,” providing little evidence of ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months. This reinforces the abandonment risk shown by the archived status.
The linked repository is archived, and its last push was over 3 years ago. Archived source indicates the project is no longer actively maintained.
The repository name does not match the package name and its README does not mention the package. That leaves uncertainty about whether the linked repository is the authoritative source.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.