Documentation, tests, a changelog, and a clear MIT license make the package inspectable. Its broad 23-package runtime dependency set and absent security policy add maintenance burden to a project with no recent development.
38%
Total Score
50
50
83
50
The package has only 2 releases, both in June 2016, with no releases in the last 12 months despite being over 10 years old. This is strong evidence of abandonment risk.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and indicating no current maintenance capacity.
The package declares 23 runtime dependencies, creating substantial compatibility and maintenance exposure for a project that has not released since 2016.
The linked repository has no security policy. This reduces transparency about vulnerability reporting and response, with no provided evidence of a replacement process.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
baum/baum Version ~1.1 | — | — |
styde/html Version ~1.0 | — | — |
pingpong/sky Version ~2.1 | — | — |
pingpong/menus Version ~2.1 | — | — |
pingpong/widget Version ~2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.