The package is clearly licensed, stable, and has a focused dependency surface. Its security documentation and community footprint are thin, which limits confidence in long-term maintenance.
58%
Total Score
100
100
83
50
The latest release was published in January 2021, about 5 years and 8 months ago, with no releases in the last 12 months. This is strong evidence of stalled maintenance for a library dependency.
The repository has 0 stars, 1 fork, and 1 watcher, indicating a very small community footprint. Popularity is supporting evidence, but this reduces visible maintenance resilience when combined with the old release history.
The linked repository has no security policy. That is a transparency gap for reporting and handling vulnerabilities, though it does not by itself show that the package is unsafe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.