The BSD-3-Clause license and detailed README improve transparency, while the repository remains unarchived. There is no security policy, and the small dependency surface does not offset the long maintenance gap.
35%
Total Score
50
100
75
75
Only three releases were published, all in November 2016, with no release in roughly 9 years and 10 months. This is strong evidence of abandonment for a package expected to remain dependable.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the very old release history and indicating no current maintenance activity.
The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is secondary to the much longer maintenance gap.
The assessed version is v3.0.0, while the registry reports v2.1.0 as the latest version. Although the reported releases are stable rather than prereleases, this version inconsistency reduces release transparency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
icanboogie/facets Version ^0.6 | — | — |
icanboogie/module-installer Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.