The package is licensed, tested, and has no runtime dependencies, which limits adoption friction. Its maintenance and security practices have not visibly progressed since the 2016 release, so future compatibility and fixes are uncertain.
42%
Total Score
50
100
86
75
release_history shows only one release, published in November 2016, with no releases in the past 12 months. That long period without updates is a substantial abandonment concern for a dependency.
repo_commit_activity reports zero commits and zero active maintainers in the past three months, consistent with the package having been inactive since 2016. No provided maintenance signal compensates for this.
security_policy reports no security policy. This is a modest transparency gap, though the small package has no runtime dependencies and no other provided security warning.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.