It has a clear MIT license, tests, a README, and no runtime dependencies. The repository is not archived, but its lack of a security policy leaves little recent assurance.
52%
Total Score
50
100
75
75
This package has had only one release, published over 10 years ago, with no releases in the last 12 months. That is strong evidence of stagnation, though a small stable library may not need frequent releases.
The repository recorded no commits or active maintainers in the last 3 months, and its last push was in March 2019. This materially increases maintenance and abandonment risk.
The repository has no security policy. This is a transparency and maintenance gap, especially for a library that may process exchanged data, although no active vulnerability is established by this signal.
The release is not marked prerelease, which avoids an explicit preview-status concern, but v0.1.0 still indicates an early major version with limited release history.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.