The package has a small dependency surface, tests, and no install-time scripts. Its documentation, licensing, security policy, and repository alignment are weak, leaving little evidence of ongoing stewardship.
32%
Total Score
100
43
75
The latest release was in May 2015, with no releases in the last 12 months despite the package being over 11 years old. This is strong evidence of abandonment risk.
The repository name does not match the package name, and no README package mention was available. The link may not clearly represent the published package, which reduces source transparency.
No registry license declaration, license file, or repository license file was detected. Developers cannot clearly establish the terms for using or redistributing this dependency.
The package includes tests, which is a small positive, but it has no README and no changelog. The missing README weakens consumer guidance for a library package.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide no evidence of an active community.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.