Simple utilities to include
28%
Total Score
unhealthy
A proprietary, one-release package last updated in 2015 is a poor long-term dependency choice.
The manifest declares a proprietary license, with no recognized license text or license file in the package or repository. That creates a serious adoption and redistribution constraint for a package presented as open source.
This package has only one release, published over 11 years ago, with no releases in the last 12 months. That strongly suggests the dependency is abandoned or no longer actively maintained.
There were zero commits and zero active maintainers in the last three months. Combined with the one-release history, this is strong evidence of no current maintenance capacity.
Only one registry account has publish access. This is consistent with the repository being user-owned, but it leaves little visible publishing redundancy when combined with the absence of recent activity.
The repository has zero stars and forks and one watcher. Popularity is not decisive, but these counters provide no supporting evidence of a broad maintainer or user community.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.