The package is narrowly scoped and MIT-licensed, which keeps adoption straightforward. Its documentation is minimal, and there is little evidence of ongoing maintenance or security practice.
43%
Total Score
0
71
75
The package has had only two releases, both in May 2019, with no releases in roughly seven years. That long silence is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity for roughly seven years.
A README is present, but it contains only 24 characters and offers little guidance to users of this library. The absence of tests and a changelog in the published artifact is normal packaging practice and is not penalized.
The repository has zero stars and zero forks, with one watcher. Popularity is only supporting evidence, but these counts provide no sign of an active user or contributor community.
The repository has no security policy, leaving vulnerability reporting and response expectations unclear. This is a secondary transparency concern alongside the much more significant maintenance inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.