A single-person project with no tests or security policy offers little evidence of ongoing care. The stable version and clean install and workflow metadata reduce, but do not remove, the adoption risk.
38%
Total Score
25
64
50
The package has only two releases, both in April 2023, and none in about three years and five months. This strongly suggests abandonment risk despite the stable current version.
There were zero commits and zero active maintainers in the last three months, consistent with the long gap since the final release and adding substantial abandonment risk.
No declared license or license file was found, leaving the legal terms for using and redistributing this library unclear.
Only one registry maintainer is listed. This is a thin ownership base for a library and increases continuity risk, with no organizational backing shown to compensate.
The package has no README, tests, or changelog, while the repository also reports no tests or changelog. Missing tests and changelog reduce confidence for a framework library; the GitHub release for this version is a small compensating positive even without release notes.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.