The small dependency footprint, tests, and MIT license make the package easy to evaluate. Organization backing and an unarchived repository help, but the maintenance record is stale.
58%
Total Score
75
100
88
50
The package has had no releases in the last 12 months, and its latest release was about 4 years ago. This materially raises abandonment and compatibility risk despite a history of five releases.
The repository recorded zero commits and zero active maintainers in the last 3 months. The unarchived, organization-owned repository provides some continuity, but no recent development evidence is a meaningful maintenance concern.
The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a hygiene gap, not evidence that the package is unsafe by itself.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.