The package is tiny and easy to inspect, with clear MIT licensing and a matching source repository. Future compatibility and support remain uncertain, so pin this version if adopting it.
58%
Total Score
50
83
50
The package has only one release, published about 12 years ago, with no releases in the past 12 months. This is a substantial maintenance and compatibility concern, though the repository shows recent activity.
All recent commits come from one contributor, leaving no demonstrated backup for maintenance. The matching repository and recent commit provide some context but do not remove the concentration risk.
The repository recorded one commit in the past three months from one active maintainer, showing some recent attention but limited evidence of sustained maintenance.
The repository has no security policy, reducing transparency about how vulnerabilities would be reported and handled. For a small data object library this is a modest rather than severe gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.