The package is small and easy to inspect, with one runtime dependency and no install-time scripts. However, it has had no release or repository activity since May 2019, and its repository has no tests or security policy, leaving limited evidence of ongoing maintenance.
42%
Total Score
100
69
75
The last of 8 releases was published in May 2019, with no releases in the past seven years. That long period without updates is strong evidence of abandonment risk, even for a small stable package.
The package includes a README and the repository uses GitHub releases, but the README is only 13 characters and neither the package nor repository reports tests or a changelog. Missing tests and the extremely thin documentation reduce transparency for a library consumers must integrate.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no additional indication of an active user or contributor community.
The repository is not archived, but it was last pushed in May 2019, matching the stale registry history. The unarchived status provides little compensation for the absence of recent activity.
The repository has no security policy. This is a transparency and maintenance gap, although the package's small five-file structure limits how much evidence can reasonably be expected.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.