The package is licensed, stable, and its small artifact has a README and no install-time scripts. Its repository is not archived and matches the package, but no releases or commits since July 2017 leave substantial maintenance and compatibility risk.
40%
Total Score
50
79
75
The latest release was published in July 2017, with no releases in the last 12 months; this long gap materially raises abandonment and compatibility risk.
The repository recorded zero commits and zero active maintainers over the last three months, consistent with the release history showing prolonged inactivity.
The linked repository is not archived, which is a compensating sign, but its last push was also in July 2017 and does not offset the lack of current maintenance.
No security policy is present. This is a secondary transparency gap, and it matters more because the project has not shown recent maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.