Risky to adopt: this release has had no new release or repository activity for more than eight years, with 14 open issues still unresolved. It is clearly licensed and has release notes, but the long inactivity makes compatibility fixes and maintenance unlikely.
38%
Total Score
38
67
83
The package has six releases since March 2015, but its latest release was in December 2017 and it had no releases in the last 12 months. More than eight years without a release is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the last push being more than eight years ago, this is strong evidence that fixes are unlikely to arrive.
Only one account has registry publishing access. Because the repository is owned by the same individual, this reflects a narrow maintainer base rather than organization-backed continuity.
The package and repository are both owned by the same individual user, confirming direct ownership but providing no organization backing or broader continuity signal.
There are 14 open issues, no open pull requests, and no issue or pull-request activity in the last month. The unresolved backlog reinforces the maintenance concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.