The package is clearly licensed, documented, and backed by a matching organization-owned repository. Its short release history, no commits in the last three months, and missing security policy leave maintenance and transparency concerns.
68%
Total Score
67
100
88
75
Only one registry publishing account is listed, which limits visible publishing redundancy, though the repository is owned by an organization and the package matches that project.
The package is only 114 days old and has two releases, both published on the same day, leaving little evidence of an established release cadence.
The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance may have paused.
The linked repository is not archived, but its last push was on May 29, 2026, consistent with the lack of recent activity elsewhere.
The repository has no security policy, leaving vulnerability reporting and disclosure expectations unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
klan1/k1.lib-html Version v2.x | — | — |
klan1/k1.lib-bootstrap Version v1.x | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.