Risky to adopt: the package has had no release or repository activity since May 2015, with only two releases overall. Its missing license and unclear repository relationship add transparency concerns, despite a small, simple artifact with no install scripts and no deprecation notice.
38%
Total Score
38
56
90
Only two releases were published, with the latest in May 2015 and none in the last 12 months. This long period without releases is a strong abandonment concern.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with activity having stopped years ago. No provided maintenance evidence compensates for this.
No declared license or license file was found in the package or repository. This creates a genuine legal and transparency concern for adoption.
One registry account has publish access. A single maintainer can be adequate for a small package, but here it provides little redundancy alongside the decade-long inactivity.
The artifact has no README, tests, or changelog. The absence of tests and changelog is normal packaging practice, but the missing README reduces consumer transparency for this library.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.