Its 14-file artifact has no install-time scripts, and the declared Apache-2.0 license is clear. The repository could not be found, while the missing README and single maintainer leave maintenance and usage guidance hard to verify.
32%
Total Score
50
60
100
The package has 18 releases but none in the last 12 months, and its latest release was about 12 years ago. This strongly indicates abandonment risk despite its earlier release activity.
Only one registry maintainer is listed, leaving little observable publishing capacity if that person becomes unavailable. This compounds the stale release history.
The published artifact has no README, which weakens consumer guidance for a helper library; the absence of tests and a changelog is not itself a packaging concern here.
v0.18 is not a stable major release, although it is not marked as a prerelease. The long-unmaintained release line makes compatibility confidence lower.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.