The package is small and coherent, with a matching repository, a usable README, and a minimal runtime dependency. Its clean install profile and published GitHub release provide some traceability, but little evidence about current quality.
38%
Total Score
100
67
75
This package has only one release, published about 13 years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency consumers may need to maintain.
No license is declared, and neither the package nor the linked repository contains a detected license file. This leaves redistribution and use rights unclear.
The repository has no security policy. For a small testing utility this is a limited transparency gap, but it provides no documented route for reporting vulnerabilities.
Version 0.1.0 is not a stable major release, which signals limited maturity. It is not marked as a prerelease, so the concern is modest compared with an explicitly prerelease package.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.