The repository offers no security scanning and the package has no consumer documentation. Its stable version and simple dependency set do not offset the long-standing lack of maintenance.
20%
Total Score
0
100
56
75
No declared license or license file was found in the package or repository. That creates a direct legal and transparency obstacle to adoption.
The package has had only one release, published about 10 years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a dependency intended for ongoing use.
The repository recorded zero commits and zero active maintainers in the last 3 months, while its last push was about 10 years ago. The stable release does not compensate for the absence of current maintenance.
The linked repository name does not match the package name, and no README mention was available to establish the relationship. This leaves uncertainty about whether the repository actually backs this package.
The repository has zero stars and zero forks, with one watcher. Popularity is only supporting evidence, but these counters provide no additional sign of active community support.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.