The package is tiny and still pre-1.0, which limits confidence in its maturity. The organization-owned repository and GPL-3.0-or-later license are positives, but there is no recent maintenance evidence.
38%
Total Score
50
67
Only two releases were published, both in July 2019, with no release in about 7 years. This is strong evidence of abandonment risk for a dependency.
The repository has recorded zero commits and zero active maintainers in the last 3 months, consistent with the release history showing no activity since July 2019.
The published library has no README, making integration and intended usage harder to verify. Missing tests and a changelog are not concerns for the published artifact by themselves.
The latest release is v0.0.2 rather than a stable major version, so the API and project maturity remain uncertain; the long inactivity makes that concern more significant.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.