The MIT license, matching repository, and practical README provide useful transparency. Its very small footprint and lack of security tooling add little confidence for a package this old.
38%
Total Score
0
69
100
The latest release was published in January 2016, and there have been no releases in more than 10 years. That is strong evidence of abandonment for a dependency whose compatibility and defects may need ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of current maintenance.
The repository has zero stars, one fork, and one watcher. Popularity is not decisive, but this provides little supporting evidence of review, adoption, or maintenance capacity.
The repository is not archived, which avoids the strongest repository-level abandonment marker, but its last push was still in January 2016 and does not offset the prolonged inactivity.
Version 0.4 is not a stable major release, so compatibility expectations are weaker; the absence of prerelease labeling does not compensate for the package's age.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.