Usable with caveats: the package is licensed, tested, non-deprecated, and backed by a matching repository, but it has had no release or commit activity for about two years. The single-maintainer project also lacks a package README and security policy.
58%
Total Score
38
100
75
67
The repository recorded zero commits and zero active maintainers in the last three months, consistent with roughly two years of inactivity and elevated abandonment risk.
One registry maintainer is consistent with a small user-owned project, but it leaves limited visible publishing redundancy if that maintainer becomes inactive.
The published artifact has no README, which makes library integration less convenient, but the source repository contains a README and tests, and the package has a GitHub release for this version.
The registry namespace and repository owner match, and the repository is user-owned rather than organization-backed. This supports ownership consistency but offers limited institutional continuity.
Only two releases were published, both on September 17, 2024, with no releases in the following 12 months. This is a meaningful sign of limited ongoing maintenance, although a small stable library may need few releases.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
savvot/random Version ^v0.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.