The repository includes tests, a clear README, a GitHub release, and only one runtime dependency. Its workflow is fully audited, but all six actions are unpinned and no security policy is published.
52%
Total Score
0
100
72
50
The package has five releases since November 2018, but none in the last 12 months and the latest was in October 2021. This long period without a release materially raises abandonment risk.
There were zero commits and zero active maintainers in the last three months, reinforcing the multi-year inactivity and increasing abandonment risk.
The repository has one star and no forks, providing little evidence of broad community use or external review. Low popularity is supporting caution rather than a verdict by itself.
The project uses Make and Composer, but no security-scanning tools were detected. For a small library this is a hygiene gap, not evidence that the release is unsafe.
The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.