MIT licensing and a short README make installation and basic use clear. However, the package has had no release or commit activity for about three years and nine months, with one registry maintainer, so maintenance risk is substantial.
38%
Total Score
25
70
50
The package has only two releases, both from December 2022, and none in the past 12 months. That long release gap materially raises abandonment risk for a dependency.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the prolonged release gap and leaving little evidence of ongoing maintenance.
Only one registry account has publish access. The small publishing base increases continuity risk, and no organization backing is shown to compensate for it.
The repository has zero stars and forks and only one watcher. Popularity is not decisive, but these counters provide no supporting evidence of community oversight.
The repository has no security policy, reducing transparency about how users should report vulnerabilities. This is a secondary concern beside the stronger evidence of inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
icecream/tool Version ^1.0 | — | — |
illuminate/http Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.