The README and included tests make its behavior easier to evaluate, and the repository matches the package. Maintenance appears to have stopped after January 2024, while the proprietary license may not suit open-source use.
55%
Total Score
75
50
The manifest declares a proprietary license, with no detected license text or license file, which can restrict adoption and redistribution in open-source projects.
The package has only two releases, with the latest in January 2024 and none in the last 12 months, indicating limited and inactive maintenance.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a package that manages persistent on-disk data.
The latest version is v0.0.2 and the package has not reached a stable major version, so its API and on-disk format may still change.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1 | — | — |
ehough/generators Version ^1.0 | — | — |
th3n3rd/cartesian-product Version ^0.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.