Risky to adopt: the package has had no release or commit activity for about six years, and its small, single-user project shows limited ongoing support. It is not deprecated or archived and includes tests, but maintenance appears effectively dormant.
47%
Total Score
25
38
50
The latest release was published in April 2020, with no releases in the last 12 months and only three releases overall. This long period without updates is a substantial maintenance concern, although the package remains non-deprecated.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly six-year gap since the latest release. No provided signal shows compensating current development activity.
Only one registry publishing account is listed. Because the repository is user-owned rather than organization-backed, this leaves a thin apparent support base when combined with the lack of recent commits.
The package contains tests, and the repository also has tests, which supports basic project maturity. However, the published artifact has no README, making integration less transparent for consumers; the absent changelog is normal packaging practice.
The repository has zero stars and forks and only one watcher, providing little evidence of a broader user or contributor base. Popularity is supporting evidence rather than decisive on its own, but it does not compensate for the dormant activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
fanamurov/larrock-category Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.