The stable version, clear GPL-2.0-or-later license, and release notes provide basic packaging clarity. Maintenance has effectively stopped for nearly six years, with no recent issue activity and no security policy.
38%
Total Score
25
79
75
The package has had no release in nearly six years: its latest release was November 2020, despite 48 releases overall. That long gap materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and weak evidence of ongoing maintenance.
There were no new or closed issues or pull requests in the last month, so the repository shows no recent maintenance or support activity to offset the stale release history.
The linked repository neither matches the package name nor mentions it in its README, creating uncertainty about whether it is the package's intended source repository.
The repository has no security policy, leaving disclosure and response expectations undocumented. This is a secondary transparency gap alongside the stronger maintenance concerns.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.