The package includes a usable README, release notes, and no install-time scripts. Its organization-backed repository and complete file tree add some transparency, but it provides no license information.
12%
Total Score
50
42
100
The registry marks the entire package as abandoned, with no replacement provided. This is a severe adoption risk because future fixes and compatibility work are unlikely.
This package has only one release, published about 2 years ago, with no releases in the last 12 months. That limited history and long inactivity provide little evidence of ongoing maintenance.
The repository recorded no commits and no active maintainers during the last 3 months. Together with the archived status, this supports a conclusion of abandonment rather than a merely quiet period.
The linked repository is archived and was last pushed about 2 years ago. Archived source strongly indicates that maintenance has stopped.
Neither the package metadata nor the artifact or repository contains a recognized license file. This creates a real legal and transparency gap for downstream users.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.