The repository is clearly tied to the package and has tests, a changelog, and release notes. Datadog ownership helps, but the recent maintenance base is narrow and the licensing metadata does not match the detected license.
72%
Total Score
70
100
81
75
The package declares MIT but its artifact license file is detected as BSD-3-Clause, creating a licensing ambiguity despite license files being present in both the artifact and repository.
The project is mature, with 29 releases since 2015, but it published no releases in the last 12 months; this indicates a quiet maintenance cadence.
All recent commits came from one contributor. Datadog organization backing provides some handoff capacity, but no second recently active contributor is shown.
Only one commit from one active maintainer was recorded in the last three months, which is limited recent maintenance activity.
There are nine open issues and one open pull request, but no issues or pull requests were created or merged in the last month, reinforcing the quiet activity picture.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.