The license, README, and release notes make the package easy to inspect and adopt. Its tiny community, absent security policy, and repository mismatch add confidence and ownership concerns.
34%
Total Score
25
75
50
The package has only 3 releases, all effectively clustered on November 23, 2021, with no releases in nearly five years. This is strong evidence of abandonment for a production dependency.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, while its last push was in November 2021. The long inactivity materially raises maintenance risk.
There were no new issues, pull requests, or merges in the last month. Combined with the old release and commit history, this provides no evidence of ongoing project activity.
The repository name does not match the package name and its README does not mention the package. Although this can occur with related projects, the combination weakens confidence that the repository clearly represents this package.
The repository has 0 stars and 0 forks, with only 2 watchers. Popularity is not required for health, but these very small adoption signals provide little evidence of a broader support community.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.