The package includes tests, a matching repository, and a declared GPL-3.0+ license. Its only release was about five years ago, with no recent commits, making future fixes and compatibility work unlikely.
38%
Total Score
25
71
75
This package has made only one release, and there have been no releases in about five years. That is strong evidence of an unmaintained dependency, despite the package not being deprecated.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the one-release history, this points to prolonged inactivity rather than a short pause.
Only one registry maintainer is listed, leaving little visible publishing redundancy. This is a secondary concern because registry access records do not prove who actively maintains the project.
The repository has zero stars and forks and one watcher. Popularity is not required for a healthy small package, but these figures provide no supporting evidence of broad adoption or community resilience.
The repository is not archived, which is a positive counter-signal, but its last push was nearly five years ago and the repository's unarchived status does not demonstrate active maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.