The package is clearly identified, licensed under Apache-2.0, and has a usable README with a very small runtime dependency profile. Its limited popularity, absent security scanning, and lack of tests leave less evidence for long-term reliability.
62%
Total Score
33
100
69
83
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Combined with the latest release and push being in August 2024, this is a clear sign of inactive maintenance.
The registry namespace and repository owner match, but the owner is an individual account rather than an organization. This provides clear ownership alignment without evidence of a broader institutional maintenance base.
The package has 12 releases since January 2021, but none in the last 12 months; the latest release was published in August 2024. This indicates a meaningful maintenance pause, though the release history shows prior activity.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is quiet rather than directly negative, but it offers little evidence of active community maintenance.
The repository has 1 star, 0 forks, and 1 watcher, providing little evidence of broad community adoption or outside review. Low popularity is supporting evidence rather than a standalone failure.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.