The artifact includes release notes and no install-time scripts, which supports safer packaging. Its license metadata conflicts, and the missing consumer README makes adoption harder.
40%
Total Score
100
60
100
The last release was in September 2018, nearly 8 years ago, with no releases in the past 12 months. This is strong evidence of abandonment risk despite the package having an established release history.
The artifact contains an MIT license file, but the manifest declares the package proprietary. That mismatch creates legal and provenance uncertainty for users.
The package includes a changelog, but no README for consumers of this library. The release notes partly compensate for documentation, while the missing README still weakens adoption and transparency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filp/whoops Version 1.1.* | — | — |
intaglio/nuclio-plugin-config Version 1.* | — | — |
intaglio/nuclio-plugin-console Version 1.* | — | — |
intaglio/nuclio-plugin-console-application Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.