The package includes a substantial test suite and release notes for this version. Its repository has no security policy or automated security scanning, adding maintenance risk.
40%
Total Score
0
50
75
The package has made no releases in the past 12 months, and its latest release was nearly two years ago. Five releases arrived within about one day, suggesting a short-lived project rather than ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the long release gap and increasing abandonment risk.
No license is declared, and neither the package nor the repository contains a license file. This leaves the legal terms for reuse unclear.
The repository name does not match the package name, and no README package mention was available. The linkage is therefore less transparent, although a name difference can be normal for a sub-package.
The repository has zero stars and forks and only one watcher. Low popularity is supporting evidence rather than a verdict, but it provides little evidence of broad community support.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.