The README is detailed and the project has been updated recently. Its small audience and lack of security-policy documentation leave less evidence of long-term support.
66%
Total Score
50
88
50
The manifest declares GPL-3.0, while the artifact license file is detected as MIT; although a license is present, this unresolved mismatch creates legal uncertainty.
One contributor made 100% of the recent commits, leaving maintenance dependent on a single person and increasing continuity risk.
The repository received 2 commits in the last 3 months, showing recent activity, but the volume is modest for a library consumers may rely on.
The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities in a file-upload component.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.