It has a clear README, release notes, and an identified license. The license declaration conflicts with the detected BSD-3-Clause file, while no security policy exists and ten issues remain open without recent closure activity.
58%
Total Score
50
100
83
50
A LICENSE file is present, but the manifest declares MIT while the artifact file is detected as BSD-3-Clause; that mismatch reduces licensing transparency.
The package has had no release in about six years, despite 14 releases overall; this is meaningful abandonment risk for a dependency.
The repository recorded no commits and no active maintainers in the last three months, reinforcing the long release gap rather than showing current maintenance.
Ten issues and one pull request remain open, with no new or closed issues or pull requests in the last month, indicating limited issue maintenance.
The linked repository has no security policy, leaving no documented process for reporting and handling vulnerabilities.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.