Risky to adopt: this is a tiny, pre-1.0 package with one release about seven years ago and no commits in roughly five years. The repository is still available and matches the package, but there is little evidence of ongoing maintenance or security oversight.
38%
Total Score
50
100
57
75
The package has only one release, published about seven years ago, with no releases in the last 12 months. That strongly increases abandonment and compatibility risk.
There were no commits and no active maintainers in the last three months. Combined with the old release history, this is strong evidence that maintenance has stopped or is very limited.
The package declares a proprietary license, while the repository contains a license file. The repository file means the release is licensed, but the conflicting or restrictive declaration creates uncertainty for an open-source dependency.
The repository has zero stars and one fork. Popularity is not decisive for a small package, but these counters provide no supporting evidence of community adoption or review.
The repository is not archived, which is a positive sign, but it was last pushed roughly five years ago and therefore does not offset the broader inactivity evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
kosatyi/datamodel Version ^0.0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.