A clear README and stable 3.0 release make integration understandable, while the tiny project footprint limits evidence of broader support. The repository is still available and package-linked, but no security scanning or policy is present.
42%
Total Score
33
69
75
The manifest declares a proprietary license, with no recognized license text or license file in the package or repository. This leaves reuse and redistribution terms unclear for an open-source dependency.
The latest release was published in April 2021, with zero releases in the last 12 months despite a 10-release history. That long pause is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the stale release history. No newer maintenance activity compensates for this gap.
Only one registry account has publish access, leaving a thin operational base. The repository is user-owned rather than organization-backed, so there is no provided evidence of additional publishing support.
The registry namespace and repository are both owned by the same individual account, confirming consistent ownership but not organizational backing. This provides limited continuity evidence for a one-maintainer project.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.