The repository is maintained and the package is licensed, tested, and clearly tied to its project. This specific alpha release was explicitly abandoned, so depend on the maintained v3 line instead.
42%
Total Score
67
100
57
75
The release includes a README, tests, changelog, and release notes, but those notes explicitly state that this alpha was abandoned and that version 4 would not be based on it.
The assessed version is an alpha while the latest stable version is v3.6.0, making this release a poor stability target even though the package's recent stable history is generally mature.
The package has a long history and 20 releases, but it has had no releases in the last 12 months, which raises concern for this release line.
There were no commits and no active maintainers in the last 3 months, a caution for current maintenance capacity, although the repository's recent push and broader project backing partly offset it.
There were no new or closed issues or pull requests in the last month, suggesting limited visible activity despite 18 open issues and 11 open pull requests.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.