Risky to adopt for new projects: the last release and repository push were about four years ago, and the README says the project is archived and will receive no fixes or features. It remains licensed, has tests in the repository, and is not formally deprecated, but maintenance risk is high.
40%
Total Score
75
60
100
The package has 37 releases and a long history, but it has had no release in about four years, indicating that maintenance has stopped rather than merely slowed.
The package includes a substantial README, and the repository has tests, which support usability and maturity. However, the README explicitly states that the project is archived and will receive no bug fixes or new features.
There were no new issues, closed issues, pull requests, or merged pull requests in the last month, consistent with an inactive project and adding to abandonment risk.
The repository is not formally marked archived, but its last push was about four years ago; this provides no evidence of current maintenance and conflicts with the README's archived-project statement.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.