38%
Total Score
50
100
67
100
The artifact has no README, tests, or changelog; absent tests and changelog are normal packaging practice, but the missing README reduces consumer transparency for this library bundle. The GitHub release confirms the version was published, but provides no release notes.
The package has had only two releases, both in November 2018, and none in about 7 years and 10 months. This strongly indicates abandonment risk for a dependency.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the last push in November 2018. There is no provided evidence of ongoing maintenance.
The repository name does not match the package name, and no README mention was collected. A name mismatch can be normal for a sub-package, but without a confirming README reference the package-to-repository relationship is less transparent.
The latest version is v0.2.0 rather than a stable major release, which is a maturity concern for a library dependency. It is not marked as a prerelease, partially offsetting that concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.