It has a clear MIT license, a readable README, and no install-time scripts. But the only release was in 2015, and the repository has had no commits for nearly seven years; its name also does not identify this package.
35%
Total Score
0
63
75
This package has only one release, published nearly 11 years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency released as version 0.0.0.
The repository recorded no commits and no active maintainers in the last three months, while its last push was nearly seven years ago. No other maintenance evidence compensates for this prolonged inactivity.
The linked repository name does not match the package name and its README does not mention the package, so the repository-to-package relationship is less transparent than expected.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, though the small package scope limits its weight.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.