The package has a tiny dependency surface and extensive tests, with no install-time scripts. Its release history is stale, and the license mismatch needs resolution before adopting it.
62%
Total Score
50
100
86
83
The manifest declares Apache-2.0 while the included LICENSE file is detected as MIT. Although a license is present, the mismatch creates avoidable legal ambiguity.
The package has had no registry release since September 2022, despite 23 releases over its lifetime; this makes current maintenance and compatibility less certain.
The repository recorded zero commits and zero active maintainers in the last three months. Its last push was in May 2024, so active maintenance is not evident.
The linked repository has no security policy. This is a transparency and reporting gap, though it is less serious for a small, focused date library.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.