The package is a very small seven-file project with no security policy, though its license is declared and it has no install-time scripts. The repository matches the package and includes a readable release artifact.
44%
Total Score
50
80
83
There has been only one release, published more than 11 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk despite the package being stable.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with its last activity being more than 11 years ago. No newer maintenance evidence compensates for this gap.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide no external sign of an active user or maintainer community.
The repository has no security policy. This is a transparency and reporting gap, although the package is small and has no evidence of active workflow or install-time behavior.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.