The package is compact and easy to audit, with no runtime dependencies, tests, an MIT license, and a matching source repository. Its age and lack of recent activity make long-term support uncertain; pin this version if adopting it.
58%
Total Score
50
100
83
83
Only one release was published, about 5 years and 3 months ago, with no releases in the last 12 months. This is the strongest evidence of an inactive project and lowers confidence in ongoing maintenance.
There were no commits and no active maintainers in the last 3 months. For a small package this may reflect completion, but it provides no evidence of current maintenance capacity.
The linked repository is not archived, so there is no explicit abandonment status. Its last push was about 5 years and 3 months ago, which is consistent with the maintenance concern from the release history.
No repository security policy is present. This is a minor transparency gap for a small, low-dependency library, but it does not by itself indicate abandonment or unsafe maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.