The six-file package has no security policy and uses a proprietary license, limiting transparency and reuse. Its minimal dependency surface and matching repository reduce complexity, but the long maintenance gap remains a substantial concern.
42%
Total Score
0
100
67
83
The latest release was in November 2020, nearly six years ago, with no releases in the last 12 months. Five releases clustered early in the package's life do not compensate for the prolonged inactivity.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the nearly six-year release gap and raising abandonment risk.
The package declares a proprietary license and has no license file, creating a meaningful legal and reuse concern for an open-source dependency.
The repository is not archived, which avoids an explicit abandonment marker, but its last push was in November 2020 and does not offset the inactive history.
No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented. The small package scope limits the practical impact but does not remove the transparency gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.