It has a readable package, a declared Apache-2.0 license, no install-time scripts, and a stable non-prerelease version. Maintenance evidence is weak because no release has appeared since January 2022, while the repository has no tests, security policy, or meaningful community activity.
55%
Total Score
88
75
The latest release was in January 2022, with zero releases in the last 12 months. This is a substantial maintenance concern, though the package has 15 releases and is not deprecated.
The repository has zero stars and forks and only one watcher, providing little evidence of community review or adoption. Popularity is supporting evidence rather than decisive on its own.
The repository has no security policy. For a small API client this is a transparency gap, but it does not by itself show that the package is unsafe to depend on.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.