Risky to adopt for new projects: it has had no release or repository activity since July 2018 and only one published version. The linked repository and MIT declaration provide basic transparency, but the project shows strong abandonment risk and limited maintenance evidence.
43%
Total Score
25
72
75
The package has only one release, published about 8 years ago, with no releases in the last 12 months. This is strong evidence that the dependency is no longer actively maintained.
The repository has had zero commits and zero active maintainers in the last 3 months, consistent with the package's long release gap. No provided signal shows compensating maintenance activity.
The artifact contains no README, tests, or changelog, although the source repository does contain a README and the release is associated with a GitHub release. The repository README partly compensates for the missing consumer documentation, while the absent tests provide little confidence in ongoing compatibility.
There are two open issues but no new or closed issues and no pull requests in the last month, suggesting unresolved maintenance needs and little current project activity.
The repository has only 1 star, 0 forks, and 1 watcher, providing little independent evidence of adoption or community support. Low popularity alone is not decisive, but it does not offset the inactivity signals.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.