57%
Total Score
50
100
75
75
No declared license, license file, or repository license file was detected. This leaves reuse and distribution rights unclear for a package intended as a dependency.
Only one registry maintainer is listed. That is workable for a small user-owned project but leaves little visible publishing redundancy if the maintainer becomes unavailable.
The package and repository are owned by the same individual account, so the source relationship is clear, but there is no organizational backing shown to offset the single-maintainer structure.
The package is 901 days old with four releases, but it has had no releases in the last 12 months; the latest release was in July 2024. This indicates materially slowed maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, which is strong evidence that maintenance has stopped or substantially slowed.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.