It has a clear README, tests, and an MIT declaration, but only one registry maintainer and seven unresolved issues add little confidence. The small, inactive project offers limited evidence that current users would receive fixes.
32%
Total Score
50
57
100
The package has only two releases, with the latest published in November 2015 and none in the last 12 months. That long period without releases is strong evidence of abandonment for a dependency.
The repository is not marked archived, which is a modest positive, but it was last pushed in November 2015. The stale source activity outweighs the administrative non-archived status.
Only one account has registry publish access. That can be normal for an individual project, but it provides little redundancy for maintenance of a package that has already gone years without a release.
Seven issues remain open, with no new or closed issues and no pull-request activity in the last month. This supports the conclusion that maintenance is inactive rather than merely infrequent.
The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy package, but these numbers provide no meaningful supporting evidence for continued maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cullylarson/ssh-copy Version ~1.0 | — | — |
cullylarson/ssh-commands Version ~1.0 | — | — |
cullylarson/local-commands Version ~1.0 | — | — |
interconnectit/search-replace-db Version ~3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.