The package includes tests, a changelog, a license, and no install-time scripts. Its tiny dependency surface and matching repository reduce adoption friction, but ongoing support is uncertain.
52%
Total Score
25
100
70
75
The package has only two releases, both in April 2016, with no releases in roughly 10 years. This strongly lowers confidence in continued maintenance, despite the short initial release interval.
The repository recorded no commits or active maintainers in the last three months, and its last push was about 8 years ago. That indicates a long-standing maintenance gap.
One registry maintainer is reasonable for a small user-owned package, but it provides little redundancy when there is also no recent release or commit activity.
The repository has 0 stars and 0 forks, with 1 watcher. Popularity is only supporting evidence, but these very low engagement levels provide no external indication of active use or review.
No security policy is present. This is a transparency gap, though the package's small scope and otherwise complete source layout keep it from being a severe risk on its own.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.