38%
Total Score
unhealthy
Risky: no releases or commits since March 2018, with no license and weak repository linkage.
No license is declared, and neither the package nor the linked repository contains a recognized license file. This leaves the legal terms for use and redistribution unclear.
The package has only 3 releases, and its latest release was in March 2018; there have been no releases in the last 12 months. This is strong evidence of an aging, inactive dependency.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the last push being in March 2018. There is no observed recent maintenance to offset the age of the release.
The linked repository name does not match the package name and its README does not mention the package. That weakens confidence that the repository is the authoritative source for this release.
The repository has no security policy. For a package implementing cryptographic-device communication, this reduces transparency around vulnerability reporting and maintenance response.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.