Question Answer
42%
Total Score
unhealthy
Risky: no releases or commits since January 2024, plus a repository/package identity mismatch.
The manifest declares a proprietary license, but no license file was found in the package or repository. This limits transparency for developers evaluating redistribution and long-term use.
The repository owner is a personal account rather than an organization, and the provided data shows no broader project backing. This makes the thin maintenance history more consequential.
The latest release was published in January 2024, with no releases in the following 12 months. That long pause weakens evidence of ongoing maintenance.
The repository had no commits and no active maintainers in the last three months, consistent with activity having stopped about two years and eight months ago. This is a meaningful abandonment concern.
The repository name does not match the package name and its README does not mention the package. That raises a concrete concern that the linked source may not actually correspond to this release.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.