The README gives basic setup and usage guidance, while the repository remains unarchived and matches the package. Consumers have limited evidence of ongoing support or clear licensing.
36%
Total Score
0
79
75
The package has had only 3 releases, with the latest on November 12, 2019 and none in the last 12 months. This strongly suggests abandonment, despite the short early release interval.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, and its last push was in December 2020. That is substantial evidence of inactive maintenance.
No declared license, recognized license text, license file, or repository license file was found. This creates a real adoption and redistribution risk.
The repository has no security policy. For an inactive framework, that leaves vulnerability-reporting and response expectations unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
codexen/shadow-core Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.