Risky to adopt: the package has had no release or commit activity for about eight years, leaving compatibility and maintenance concerns. It is not deprecated or archived, and it has a matching organization-backed repository, a license, and a usable README, but those positives do not offset the prolonged inactivity.
38%
Total Score
50
72
90
Only two releases exist, with the latest published about eight years ago and no releases in the last 12 months. This is strong evidence of abandonment or at least unverified compatibility with current dependencies.
The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the roughly eight-year gap since the last push and materially increasing abandonment risk.
One registry maintainer account is consistent with the organization-backed project, but the maintainer count alone does not demonstrate ongoing activity; the repository activity signal shows none recently.
There are no open issues or pull requests and no activity in the last month. While this avoids an unresolved backlog, it also provides no evidence of active community maintenance.
The repository has zero stars and forks and only two watchers, indicating little visible adoption or community support. Popularity is supporting evidence rather than decisive evidence, so this reinforces but does not create the main concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.