Its one runtime dependency, included tests, and clear README reduce integration friction. The declared MIT license conflicts with the detected GPL-2.0 license, while no commits in three months leaves maintenance uncertain.
60%
Total Score
67
100
72
83
The manifest declares MIT, but the artifact license file is detected as GPL-2.0; although a license file exists, the mismatch creates a material adoption and compliance concern.
The package has 14 releases but none in the last 12 months, and its latest release was in December 2024. That suggests slowed maintenance for a library used in registry integrations.
The repository recorded no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance despite the repository being present and unarchived.
There were no new or closed issues or pull requests in the last month, while open issue count is unknown. This is consistent with limited recent activity but is not decisive alone.
The repository has no stars or forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little external evidence of maturity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.