The seven-file project is minimally documented and has no security policy, although licensing is clear and the dependency surface is small. It is not deprecated or archived, but its maintenance record makes adoption a liability.
38%
Total Score
100
69
75
The latest release was published in March 2016, with no releases in the last 12 months; this is strong evidence of abandonment risk despite the package not being deprecated.
The package includes a README, but it is only 55 characters and the artifact and repository have no tests or changelog; the missing tests and changelog are normal packaging practice, while the minimal documentation offers limited transparency.
The repository has 0 stars and 0 forks with only 1 watcher, providing little evidence of an active user or contributor community.
The repository is not archived, which is a meaningful counterweight, but its last push was also in March 2016 and does not offset the stale release history.
The repository has no security policy, leaving no documented process for reporting or handling security issues; the small, old project provides no compensating security tooling.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.