Usable with caveats: this is a mature, clearly backed library with tests, release notes, minimal dependencies, and no deprecation or workflow red flags. However, there have been no registry releases in the past 12 months and no commits in the past 3 months, so maintenance appears slower than ideal.
72%
Total Score
75
100
94
88
The package has existed since January 2013 with 24 releases, but it had no registry release in the last 12 months. The long history supports maturity, while the recent pause is a maintenance concern.
The repository recorded zero commits and zero active maintainers in the past 3 months. This is the clearest maintenance concern, although the recent push and mature project history provide some compensation.
There is some current pull-request activity, but no issues were opened or closed in the last month and no pull requests were merged, suggesting limited recent development momentum.
None of the six workflows declares top-level token permissions, which is a permissions-hygiene gap. However, none declares top-level write access, so the evidence does not indicate excessive write capability.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.