The README gives clear installation and usage guidance, and the package has a small runtime dependency surface. Its missing security policy provides little additional transparency for ongoing maintenance.
45%
Total Score
25
100
70
50
This is a single-release package first and last published about 6 years and 8 months ago, with no releases in the past 12 months. That strongly limits evidence of ongoing maintenance.
The repository recorded no commits and no active maintainers in the past 3 months, while its last push was in January 2020. This corroborates long-term inactivity.
Three issues remain open, with no issues or pull requests opened or closed in the past month. The lack of recent issue resolution adds to the maintenance concern.
The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these counts provide no community signal to offset the inactivity.
The repository has no security policy and no security scanning tools. For a component that handles application content and uploads, this leaves limited public guidance for reporting and handling vulnerabilities.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.