The artifact is small and easy to inspect, with a clear README and no install-time scripts. It is not deprecated or archived, but its long-term maintenance and ownership trail remain weak.
40%
Total Score
50
67
100
The package has had only 3 releases, with none in the last 12 months; its latest release was over four years ago. This is strong evidence of stagnation for a dependency.
The linked repository recorded 0 commits and 0 active maintainers during the last 3 months, providing no evidence of current maintenance capacity.
No license is declared, and no license file was detected in either the package or the collected repository. This creates a real adoption and redistribution concern.
The linked repository name does not match the package, and its README does not mention this package. That weakens confidence that the repository is the correct source for this release.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.