Usable with caveats: the package is licensed, not deprecated or archived, and has an organization-backed repository with tests. However, it has had no registry release for nearly six years and no repository commits for more than five years, making future compatibility and maintenance uncertain.
58%
Total Score
75
83
75
The package has 26 releases since 2017, but its latest release was in September 2020 and there were no releases in the last 12 months. This long publishing gap is a meaningful maintenance concern despite the earlier regular release cadence.
The repository recorded zero commits and zero active maintainers over the last three months, consistent with the package's prolonged release gap. This raises abandonment and compatibility risk.
The repository is not archived, which leaves a path for future maintenance, but it was last pushed in May 2021. The unarchived status partly offsets, but does not remove, the inactivity concern.
The repository has no security policy, which leaves vulnerability-reporting expectations less explicit. The README does provide a security contact, partially compensating for this missing repository policy.
The only workflow lacks a top-level token-permissions declaration, so its permissions are less explicit than preferred. No top-level write permissions were observed, limiting the severity of this hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
botman/botman Version ~2.1|~3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.