Risky to adopt: this package has had only one release, published more than 13 years ago, with no repository activity since that day. It is licensed, small, and transparently linked to its matching repository, but the age and lack of ongoing maintenance make it a liability for new projects.
38%
Total Score
50
100
60
75
The package has only one release, and its latest release was more than 13 years ago; there have been no releases in the last 12 months. This is strong evidence of abandonment risk despite the stable 1.0.0 version.
The repository is not formally archived, but it was last pushed more than 13 years ago, so the non-archived status does not compensate for the absence of recent maintenance.
There are no open issues or pull requests and no recent activity. While this may reflect a small, quiet project, it provides no evidence of current maintenance or issue response.
The repository has no security policy. This is a transparency gap, although the package's much larger concern is its demonstrated lack of maintenance over more than 13 years.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.