Tests, a changelog, a clear MIT license, and no install-time scripts improve transparency and reduce packaging risk. The repository matches the package and is not archived, but there is no evidence of maintenance since 2015, making compatibility and abandonment concerns substantial.
35%
Total Score
0
79
75
The last release was in March 2015, with no releases in the past 12 months; this is strong evidence of abandonment for a dependency released at version 0.1.4.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving no current maintenance evidence.
The repository has no security policy, leaving vulnerability-reporting guidance absent; this is a secondary transparency gap rather than the main adoption concern.
The release is not marked as a prerelease, but the latest version remains 0.1.4 rather than a stable major release, limiting maturity confidence alongside the lack of recent activity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
jacobstr/dumpling Version ~0.0.3 | — | — |
evenement/evenement Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.