The package includes clear usage documentation, an MIT license, repository tests, and only one runtime dependency. Organization backing and matching repository references improve provenance, while the lack of security tooling leaves maintenance oversight limited.
54%
Total Score
0
100
70
50
The latest of only two releases was published about 10 years and 11 months ago, with no releases in the last 12 months. This is strong evidence of a long-frozen project, although the package may be functionally stable.
The repository recorded no commits and no active maintainers in the last three months, consistent with the absence of releases for about 10 years and 11 months. No provided signal shows ongoing maintenance capacity.
The repository has 6 stars, 0 forks, and 13 watchers, indicating limited external adoption and review. Popularity is supporting evidence rather than a verdict, but it provides little additional maintenance confidence here.
The linked repository has no security policy. For a package that processes application log data, this is a transparency and maintenance gap, though it is not evidence of a security flaw by itself.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.