The small repository has no tests, changelog, README, or security policy, leaving little guidance for consumers. Its single-maintainer, single-release history offers limited evidence that problems will be addressed.
32%
Total Score
25
64
83
The package has only one release, published in May 2018, and no releases in the past 12 months. This is strong evidence of abandonment for a dependency expected to receive maintenance.
The repository recorded no commits and no active maintainers in the past three months, consistent with the release history showing no activity since May 2018.
No license declaration or license file was detected in the package or repository. That creates a material adoption and legal transparency gap.
The package has one registry maintainer, and the repository is owned by the same individual. This is not inherently unsafe, but it leaves little visible maintainer redundancy if that person stops responding.
The artifact has no README, tests, or changelog; the missing tests and changelog are normal for published artifacts, but the missing README reduces consumer guidance for this library.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.