The single-maintainer project has no tests or security scanning, and its README offers little consumer guidance. It is licensed and has a small dependency surface, but maintenance capacity is difficult to establish.
38%
Total Score
50
100
72
75
The package has had no releases in nearly 9 years, despite five releases clustered over about one week in July 2017. This strongly indicates abandonment risk.
The repository has recorded zero commits and zero active maintainers in the last 3 months, with its last push on July 26, 2017. The long-standing inactivity materially lowers confidence in ongoing maintenance.
Only one registry account has publish access. Organization backing provides some context, but the observed publishing base remains thin.
The artifact includes a README, but it is only 29 characters and provides little integration guidance. The absence of tests and a changelog is not a packaging gap for this ecosystem.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than decisive, but these counters provide little evidence of broad review or adoption.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
kazist/inventory Version @stable | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.