A small dependency set, MIT license, clear README, and repository tests support straightforward use. The package has seen no release or commit activity since November 2019, leaving compatibility and abandonment concerns.
44%
Total Score
50
100
79
75
Only two releases were published, both in November 2019, with no releases in the last 12 months and nearly seven years since the latest release. This is strong evidence of abandonment risk for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The package may be stable, but there is no observed maintenance capacity for new issues or ecosystem changes.
The repository has only 3 stars, 0 forks, and 2 watchers, providing little community evidence or external maintenance support. Popularity is supporting evidence rather than a verdict, so this modestly reinforces the maintenance concern.
No security policy was found, which reduces transparency for reporting and handling vulnerabilities. This is a secondary concern because the package is small and has no evidence of active security-sensitive workflows.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ^2.0 | — | — |
npm-asset/pell Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.