The artifact contains tests and no install-time scripts, which limits integration and installation surprises. Documentation and security-policy coverage are thin, while the project has little adoption.
39%
Total Score
25
63
83
The latest release was over 10 years ago, with only two releases total and none in the last 12 months. This is strong evidence of abandonment risk despite the package not being formally deprecated.
There were no commits and no active maintainers in the last 3 months. Combined with the old last push, this indicates sharply reduced maintenance capacity.
The artifact includes tests and the repository also has tests, which is a small positive. The package has no README, reducing consumer guidance for a library, while the absent changelog is normal packaging practice.
The source repository is owned by an individual account rather than an organization, and no broader project backing is shown. That makes the single-maintainer and inactivity concerns more consequential.
The repository has zero stars and one fork, showing very limited visible adoption. Popularity is supporting evidence rather than a verdict, but it provides little confidence in long-term maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.