The repository is small and straightforward, with no security policy or automated security scanning. That leaves little documented support if compatibility or licensing problems arise.
31%
Total Score
0
38
50
This package has only one release, published nearly 9 years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency needing ongoing compatibility support.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the lack of recent releases. This substantially increases maintenance and abandonment risk.
The manifest declares MIT, but the repository license file was detected as GPL-3.0. The mismatch creates material uncertainty about the terms governing this release.
The repository has only 5 stars, 4 forks, and 1 watcher. Low popularity is supporting evidence rather than a verdict, but it suggests limited community visibility and backup.
The repository is not archived, which is a compensating sign, but it was last pushed nearly 9 years ago and therefore does not offset the absence of current maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.