The MIT license, README, tests, and stable major version provide a reasonable foundation. Adoption is minimal, the project lacks a security policy, and its single-maintainer model leaves little visible maintenance capacity.
58%
Total Score
50
100
83
75
Only one registry publishing account is listed. That is a limited publishing base for a user-owned project and increases continuity risk when maintenance activity is already weak.
The repository is owned by an individual rather than an organization, so the single registry maintainer is not balanced by visible organizational backing.
The package has 15 releases over about eight years, but no release in the last four years; the latest registry release was in August 2022. This is a substantial maintenance concern.
There were no commits and no active maintainers in the measured three-month period. This reinforces the concern raised by the absence of recent registry releases.
The repository has zero stars and forks and one watcher. Popularity is not decisive, but these values provide little supporting evidence of broad adoption or review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cl/site Version ^2.3.1 | — | — |
cl/users Version ^2.3.1 | — | — |
cl/console Version ^2.3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.