The MIT license, matching repository, and documented setup make the package easier to inspect and adopt. No security policy or security scanning limits transparency around future maintenance.
42%
Total Score
0
70
75
The package has only 3 releases, all concentrated between October 8 and October 17, 2019, with none in the last 12 months. This indicates a long-standing release gap and materially raises abandonment risk.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with activity having stopped nearly seven years ago. The lack of recent work is a major maintenance concern.
The repository has only 3 stars, 0 forks, and 1 watcher. Low adoption is supporting evidence of limited project traction, though it is less important than the inactive maintenance signals.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap, especially for a framework-style package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cockroach/cockroach Version ~1.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.