Testing and licensing are in place, and the package has a small dependency footprint. Its maintenance appears to have stopped after the 2016 release, with no security policy or meaningful repository activity to offset that risk.
44%
Total Score
100
67
83
The latest release was about 10 years ago, with only two releases and none in the last 12 months. This is strong evidence of abandonment for a maintained library.
The repository has zero stars and forks and only one watcher, providing no meaningful community signal to compensate for the lack of recent maintenance.
The repository is not archived, but it was last pushed about 10 years ago, so its active status does not offset the long maintenance gap.
No security policy is published. This is a transparency gap, although it is less severe than the package's prolonged inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.