Risky to adopt: this package has had no release or repository activity for over five years, and its linked repository does not match the package name. It is not deprecated and includes a license, but maintenance and ownership transparency are weak.
38%
Total Score
0
63
75
Only two releases exist, both dating to May 2021, with no release in over five years. That long period without updates is a substantial abandonment concern.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the package's long release inactivity.
The published artifact has no README, which makes a small library harder to understand and integrate; the absence of tests and a changelog in the package is normal packaging practice and does not add concern.
The linked repository name does not match this package, and no README mention was collected. This raises a concern that the repository may not clearly belong to the package.
The repository has zero stars and forks and only one watcher. Popularity is not decisive, but these counters provide no supporting evidence of an established project.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.