Its small scope keeps adoption straightforward. The release has had no updates for over two years, and the repository has no security policy, so pinning it is preferable.
58%
Total Score
50
100
83
83
The package has had no release in over two years, with all four releases concentrated on its first day. That strongly suggests a dormant project, although it is not marked deprecated.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This lowers confidence in ongoing maintenance but is not abandonment proof by itself.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though the package has no install-time lifecycle scripts.
Version 0.3.0 is pre-1.0, which signals an experimental maturity level. The clear README and focused testing-tool purpose partly compensate for that limitation.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
typo3/minimal Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.