The small three-file codebase has useful documentation and no install-time scripts. One maintainer, limited adoption, and no security policy leave little evidence of ongoing support.
42%
Total Score
25
64
83
This is the package's only release, published over 10 years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a dependency.
There were zero commits and zero active maintainers in the last 3 months, consistent with a project that has been inactive for over 10 years.
A single registry maintainer creates a thin support base. The linked repository is owned by the same individual, so the registry count is consistent with the project backing but still leaves a high bus-factor risk.
Seven stars and three forks show limited adoption. Popularity is only supporting evidence, but these counts provide little additional confidence in long-term maintenance.
The repository is not archived, which avoids a severe abandonment signal, but its last push was in March 2016 and therefore does not offset the lack of recent activity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.