The package is licensed, clearly tied to its repository, and has a small runtime dependency footprint. It lacks tests, a security policy, and recent development activity, leaving future maintenance uncertain.
48%
Total Score
50
100
72
83
The latest release was in August 2022, with no releases in the following four years despite 13 releases overall. This long gap materially raises abandonment risk.
There were no commits and no active maintainers in the last three months, consistent with a project that is no longer receiving regular maintenance.
Only one registry account has publish access. This is not an activity measure, but it leaves little redundancy if the sole publisher becomes unavailable.
The artifact includes a README, while the absence of tests and a changelog is normal packaging practice. The repository also has no tests or changelog, reducing transparency somewhat.
The repository is owned by an individual rather than an organization, so there is no visible organizational backing to compensate for the thin maintenance base.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cl/course Version ^2.3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.