The package is small, dependency-free, licensed, and includes tests and usage documentation. Its single maintainer and absent security policy leave limited support and transparency if problems emerge.
55%
Total Score
50
100
75
75
Only three releases were published, all in March 2023, with no release in roughly three years. This is meaningful abandonment risk for a dependency, despite the initially rapid release interval.
The repository recorded no commits and no active maintainers in the last three months, and its last push was roughly three years ago. The small scope may reduce maintenance needs, but there is no evidence of ongoing upkeep.
The repository name does not match the package name and its README does not mention the package, making package-to-source ownership less transparent. The repository may still be related, but the collected evidence does not establish that clearly.
The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap, though it is less severe for a small package with no runtime dependencies.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.