The small codebase has repository tests and no install-time scripts, which limits maintenance and installation concerns. However, the license declaration conflicts with the detected MIT license, and the repository does not identify this package in its README.
52%
Total Score
50
75
100
The manifest declares ISC while the artifact license file is detected as MIT; the release is licensed, but the mismatch creates avoidable legal uncertainty.
The package has had no release in about three years and none in the last 12 months, indicating stalled publishing despite six earlier releases.
There were no commits and no active maintainers in the last three months, supporting the broader evidence of inactive maintenance.
The linked repository name does not match the package and its README does not mention it, so the repository's ownership of this package is not clearly established.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
francerz/console Version ^0.1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.0 | — | — |
psr/http-server-middleware Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.