The small, dependency-free codebase includes tests and a clear MIT licence. Its identity concerns and long release gap make adoption risky; pin this exact version if you proceed.
38%
Total Score
75
100
71
83
The package borrows the identity of digitickets/lalit, which has 148,433 monthly downloads and 20 stable releases versus 222 downloads and 2 releases here. Despite zero artifact overlap, this is strong evidence that consumers could select the wrong package.
Only two releases exist, with the latest published about 3 years 9 months ago and none in the last 12 months. The repository was pushed recently, but registry activity still suggests a stale release channel.
The repository has no commits and no active maintainers in the last 3 months. This weakens confidence that fixes or maintenance are currently reaching the project.
No security policy is provided. This is a transparency gap, although the package is small and has no declared runtime dependencies.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.