The source includes tests and a README, and the release has a matching MIT license. It has no runtime dependencies or install scripts, but its very small adoption and lack of a security policy reduce confidence.
42%
Total Score
75
100
75
50
This is the package's only release, published nearly eight years ago, with no releases in the last 12 months. That strongly raises abandonment risk.
There are no open issues or pull requests and no activity in the last month. This is consistent with a dormant project, though it does not prove abandonment by itself.
The repository has only 4 stars, 2 forks, and 1 watcher. Popularity is not decisive, but these small numbers provide little supporting evidence of active use.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, especially for a package interfacing with pinentry tools.
The package is not marked prerelease, but its only version is still v0.1.0, providing little evidence of a mature release history.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.