The package has a usable README, tests, and a small dependency surface. Its long-standing lack of project activity and licensing leaves meaningful maintenance and adoption risk.
39%
Total Score
100
67
50
Only two releases were published, both within minutes on April 2, 2017, with no releases in the last 12 months; this is strong evidence of abandonment risk.
The package has no declared license and no detected license file, leaving developers without clear permission to use, modify, or redistribute it.
The repository has zero stars and forks and only one watcher, providing little community evidence to offset the long period without releases or visible maintenance.
No security policy is present in the repository, reducing transparency for reporting and handling vulnerabilities; the lack of ongoing activity makes this gap more significant.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^1.21 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.