It is a small, focused package with no runtime dependencies and clear usage documentation. Organization ownership and a clean package match provide useful context, but compatibility support is uncertain.
40%
Total Score
50
100
79
100
The package has made no releases in roughly 7 years, despite having three releases overall. This is strong evidence of abandonment risk for a framework integration.
The repository has had zero commits and zero active maintainers in the last 3 months, with the last push in March 2019. The long-term inactivity is not offset by other maintenance evidence.
The release is a stable 1.0.x version rather than a prerelease, which supports basic maturity, but the registry reports latest version 1.0.1 while the assessed release is 1.0.3, making version history less clear.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.