Its single registry maintainer and zero-star repository offer little evidence of ongoing support. The MIT license, readable documentation, and minimal runtime dependency reduce adoption friction, but do not offset the maintenance uncertainty.
38%
Total Score
100
64
75
This is the package's only release, published about six years ago, with no releases in the last 12 months. That strongly suggests abandonment risk for a framework integration.
The repository name matches the package, but its README does not mention the package name. That weakens confidence that the linked source clearly documents this release.
The repository has zero stars and zero forks, with one watcher. Popularity is only supporting evidence, but these counts provide little evidence of community support or review.
The repository is not archived, which avoids the strongest abandonment signal, but it was last pushed on September 25, 2020, matching the package's long inactivity.
The repository has no security policy. This is a transparency gap, though it is less significant than the package's long inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.