Its single runtime dependency keeps the package simple, but the available evidence does not establish ongoing care or strong project transparency. The package should not be a default dependency for new projects.
32%
Total Score
100
50
The package has only two releases, both in February 2017, with no release in roughly nine years. That long period without a release is strong evidence of abandonment risk.
The latest version is v0.2 and is not a stable major release, which indicates limited maturity. Its non-prerelease status provides only a small counterpoint.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.