It has one runtime dependency and is not marked deprecated. The package has had no release activity for about 11 years, while its source could not be verified and only one maintainer is listed.
35%
Total Score
50
100
50
The package was first released about 11 years ago, but its latest release was also in April 2015 and there have been no releases in roughly 11 years. This is strong evidence of abandonment risk.
Only one registry account has publish access. That thin maintainer base increases continuity and abandonment risk, especially alongside the long period without releases.
Version 0.9.12 is not a prerelease, which avoids an additional stability concern, but it remains an old pre-1.0 line with no newer releases to demonstrate continued support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
components/jquery Version >= 1.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.