The package has a clear README, tests, an MIT license, and no runtime dependencies. Security documentation and ongoing project activity are limited, so pinning this version is preferable.
54%
Total Score
50
100
80
50
The package has made no releases in nearly 8 years; its four-release history shows little evidence of ongoing maintenance, despite the stable v2.2 line.
There have been no new or closed issues or pull requests in the last month, and one issue remains open; this supports the maintenance concern but is not severe alone.
The repository is not archived, but it was last pushed in November 2018, which reinforces the long period without visible project activity.
The repository has no security policy or security-scanning tools, leaving vulnerability reporting and security practices undocumented for a dependency that has not been updated in years.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.