The package is a small, stable distribution with no install-time scripts, and its repository is still unarchived. Its missing license and absent activity since May 2023 leave maintenance and reuse concerns.
55%
Total Score
50
80
75
Neither the package metadata nor the artifact or repository contains a recognized license. That creates a concrete legal and adoption risk for downstream projects.
The package has 24 releases over roughly 11 years, but none in the last 12 months and the latest release was in May 2023. This indicates a mature but currently inactive release stream.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the older latest release. This lowers confidence in ongoing maintenance, though it does not show that the project is archived.
The repository has no security policy, leaving no documented channel or process for reporting security issues. This is a transparency and maintenance gap rather than evidence of malicious behavior.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.