The package includes tests, a readable README, a non-archived repository, and no install-time scripts. Its license metadata conflicts with the MIT license file, and one maintainer plus no security policy reduce transparency.
35%
Total Score
0
67
50
The latest release was 11 years ago, with no releases in the last 12 months; its earlier 15-release history does not compensate for the prolonged halt.
The repository had no commits and no active maintainers in the last 3 months, consistent with a project whose last recorded push was about 10 years ago.
A GPL-2.0+ manifest declaration conflicts with the MIT license identified in LICENSE.txt, creating a material licensing ambiguity despite the presence of license files.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented; the lack of security scanning further limits available assurance.
Version 0.7.2 is not a stable major release, which adds compatibility uncertainty for a library, although it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.