indieweb/comments
It has a clear Apache-2.0 license, tests, release notes, and only one runtime dependency. Organization backing helps, but no security policy leaves limited disclosure guidance.
65%
Total Score
67
100
90
83
Health Score Breakdown
The package has 14 releases since February 2014, but none in the last two years as of the September 2026 assessment. This indicates materially slowed maintenance, although the long history provides some maturity.
The repository had zero commits and zero active maintainers in the last three months. Combined with the absent recent registry releases, this raises abandonment risk.
There were no new or closed issues or pull requests in the last month, while five issues and two pull requests remain open. This suggests limited current project activity.
The repository has no security policy and no security scanning tools. This is a transparency and maintenance gap, though it does not by itself make the package unfit.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Aaron Parecki |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tantek/cassis Version ^0.3 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.