Its MIT license, included tests, and matching repository make the package easy to inspect. The four runtime requirements are small, although workflow actions are unpinned and no security policy is present.
55%
Total Score
67
100
88
67
The package has 18 releases since 2015, but none in the last 12 months and its latest registry release was about 3 years ago. That indicates materially reduced maintenance activity.
The repository recorded 0 commits and 0 active maintainers over the last 3 months. This supports the broader indication that maintenance has stalled.
There is only 1 open issue, with no new or closed issues or pull requests in the last month. The low issue load is not itself harmful, but it provides no evidence of active upkeep.
The repository has no security policy. For a package that processes IP data, this weakens vulnerability-reporting transparency, though it is not evidence of a vulnerability by itself.
The assessed version is 3.0.2, while the reported latest registry version is v2.1.1; although it is a stable major and not a prerelease, the version discrepancy reduces release-history confidence.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.