The package is small and clearly packaged, with tests, a README, and a license. Its lone release and inactive repository make maintenance and compatibility uncertain for a security-sensitive dependency.
38%
Total Score
0
70
75
This is the package's only release, published over 10 years ago, with no releases in the last 12 months. That strongly increases abandonment and compatibility risk.
The repository recorded no commits and no active maintainers in the last 3 months, consistent with a project that has not been maintained since its initial release.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of an active user or maintainer community.
The repository has no security policy. For a CSRF library, this reduces transparency around vulnerability reporting and response.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.